Just more ramblings of another IT Guy

Category Archives: Tips+Tricks

Windows Update Error number: 0x8024400A

After a fresh install of windows xp (from original recovery cd) the follwoing was encountered upon trying to run wndows updates ” The website has encountered a problem and cannot display the page you are trying to view. The options … Continue reading

Guest NTLM access (CLI only)

Guest profile access may be granted to users failing NTLM authentication, such as visitors who have no user credentials on the network. To allow guest users in NTLM, use the following CLI command: If there are multiple domains, a trust relation … Continue reading

CLI commands to enable encryption between FortiGate and FortiAnalyzer

Use the following commands to enable encryption between the FortiGate unit and the FortiAnalyzer unit: On the FortiGate unit: config log fortianalyzer setting set encrypt enable set psksecret <presharedkey_str> set localid <devname_str> end On the FortiAnalyzer unit: config log device edit … Continue reading

Output Apache access_log via syslog

While I have not had the opportunity to test this yet Terry Burton of http://blog.terryburton.co.uk has a very simple solution to the issue of getting the Apache access_logs to be set via syslog. By default Apache only seems to support … Continue reading

Wan Opt & Web Cache CLI only on certain Fortigates

Wan Opt and Web Cache has gone CLI only for certain Fortigate models (See below) since Version 4 Mr3 Patch 4. The removal from the Web GUI is apparently for performance reasons. ask a nurse

Realtime upload of logs to FortiAnalyzer

By default on Fortigate units with hard drives logs are only uploaded once a day. Units without a hard drive upload in realtime by default. If you would like a hard drive equipped Fortigate to upload logs in Realtime use … Continue reading

FortiOS version 4 mr3 patch6 supported 3G modems

Fortinet has published a list of the supported 3G modems for Version 4 MR3 Patch 6 and it can be found here

Check Fortigate interface for errors

You can use the following command to check a Fortigate interfacefor any possible errirs that may affect traffic performance # diagnose hardware deviceinfo nic <port_name>

Determine FortiAP when not connected to Fortigate

When faced with the need to determine what version of firmware a FortiAP is running with connecting it to a Fortigate, connect to the FortiAP via the console and run the following command “fap-get-status”

Convert Cisco Juniper and Checkpoint configs to Fortifagate compatible

The FortiConverter converts configuration files from Juniper, Checkpoint and Cisco The conversion process will not convert all settings but will do enough to take the major work out of moving to a Fortigate It can be found here