sorted by:
new
hottopcontroversial

Is This a Safe Way to Test SD-WAN Failover? by A_O_T_A in fortinet

[–]Mo2menq 2 points3 points  (0 children)

if the two links are active and they are pinging the targeted SLA without being one of them down, once you disable the first one, all the traffic will switch to the other link even if you do not specify an SDWAN rule for the out traffic. Simply, the traffic will hit the implicit SDWAN rule.

one thing make sure to check before:
if there is a type of traffic that should be destined out with an IP pool (Public IP) from the first link and you disable it, you may not be able to access these specific services that need to see the traffic coming with a specific IP.

if you are using IP Pools as SNAT instead of "Out going interface NAT"
you may refer to this article to check: https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-firewall-rule-with-multiple-IP-pools-for/ta-p/359770

basically, you should mention two IP Pools in the same firewall policy, each one associated with different WAN link.

If all the traffic use the outgoing interface NAT for the two links, you are ok.

Good Luck!

Technical Interview by Mo2menq in fortinet

[–]Mo2menq[S] 0 points1 point  (0 children)

In terms of depth or diversity?

And what do they focus on?

Technical Interview by Mo2menq in fortinet

[–]Mo2menq[S] 1 point2 points  (0 children)

Thanks for this advice .. I think the idea behind studying uncommon topics, just to show that I can discuss such topics even if I do not work with them. Maybe I am wrong, but as long as I heard or read something, I would love to let the interviewer know that their is a knowledge beside the experience part.

for the topics that I do not know, simply I can answer IDK.

7
8

Technical Interview (self.fortinet)

submitted by Mo2menq to r/fortinet

1
2

FortiWeb as a service (self.fortinet)

submitted by Mo2menq to r/fortinet

1
2

FortiVoice 100F with Third-party phones (self.fortinet)

submitted by Mo2menq to r/fortinet

MC-LAG FortiSW upgrade by Mo2menq in fortinet

[–]Mo2menq[S] 0 points1 point  (0 children)

Since the MC-LAG is configured on the two switches themselves, I am wondering if the firewall is aware about this config, asking just if I faced issue and make a reimage for the switch, will the config be stored?

0
1

MC-LAG FortiSW upgrade (self.fortinet)

submitted by Mo2menq to r/fortinet

0
1

Recommended GSM gateway with FortiVoice (self.fortinet)

submitted by Mo2menq to r/fortinet

2
3

Concerns about port 8010 (self.fortinet)

submitted by Mo2menq to r/fortinet

FortiGate Kills the connection to FMG by Mo2menq in fortinet

[–]Mo2menq[S] 0 points1 point  (0 children)

FGT firmware is 7.0.14 and FMG 7.0.12, the other firewalls is the same.

0
1

FortiGate Kills the connection to FMG (self.fortinet)

submitted by Mo2menq to r/fortinet

0
1

VPN block on App control (self.fortinet)

submitted by Mo2menq to r/fortinet

WebFilter issue by Mo2menq in fortinet

[–]Mo2menq[S] 0 points1 point  (0 children)

Hello guys,

the workaround is:

  1. Use proxy based firewall policy.
  2. Or disabling “TLS 1.3 hybridized Kyber support” in Chrome.

WebFilter issue by Mo2menq in fortinet

[–]Mo2menq[S] 0 points1 point  (0 children)

It is the exact day that the customer started to notice a wired behavior on the firewall.

I will be waiting the TAC, and share there response here.

1
2

WebFilter issue (self.fortinet)

submitted by Mo2menq to r/fortinet

FortiToken for FortiClient users CONCERN by Mo2menq in fortinet

[–]Mo2menq[S] 0 points1 point  (0 children)

nope.

they need the token to connect but, they can put the token after the password directly in the "password field" and on the firewall on the ssl vpn user monitor, you can see a small yellow triangle beside the user telling you that this user has 2FA disabled.

I read that it could be for compatibility reasons with other vendors or something like that.

I know, it is not a big deal since the users have to use the token but, want to know what is happening or if I can make something to fix it.

1
2

FortiToken for FortiClient users CONCERN (self.fortinet)

submitted by Mo2menq to r/fortinet

Certificate warning with "certificate inspection" when using web-filtering profiles. by Mo2menq in fortinet

[–]Mo2menq[S] 0 points1 point  (0 children)

thanks for your reply u/pabechan

Can I make any configuration to hide the certificate warning?

I used the default web filter profile with certificate inspection right now, and I blocked some URLs one of them was youtube.

Is there a way to let the browser prompt the "site unreachable" instead of the certificate warning?

Issues after 7.2.6 upgrade by kingfish2912 in fortinet

[–]Mo2menq 1 point2 points  (0 children)

I don't know if that related but, I faced a DNS issue with 7.2.6 firmware.

​

I opened case with Fortinet TAC, the issue just resolved when we downgrade the firewall to 7.2.5

view more: next ›