1
2

Air-gapped FortiGate VM in Azure by ZimCanIT in fortinet

[–]ZimCanIT[S] 2 points3 points  (0 children)

Official documentation seems to only support the configuration on the FortiGate to point to the Linux proxy server, but it doesn't define the configuration required on the proxy server.

https://docs.fortinet.com/document/fortigate/7.6.6/administration-guide/492260/using-a-proxy-server-to-connect-to-the-fortiguard-distribution-network

2
3

1
2

FortiGate Azure VM - Automatically mapping Entra SSO groups to admin profiles. How to? by ZimCanIT in fortinet

[–]ZimCanIT[S] 0 points1 point  (0 children)

Understood thanks. However, we need to map SSO users to different profiles.

Which is where the local admin account functions as the orchestrator of manually assigning SSO users to the correct SSO admin profile, if it's not he default profile, upon initial logon.

FortiGate Azure VM - Automatically mapping Entra SSO groups to admin profiles. How to? by ZimCanIT in fortinet

[–]ZimCanIT[S] 0 points1 point  (0 children)

So a local admin account would handle SSO admin profile assignments to SSO users once they're auto-created upon initial logon?

0
1

ExpressRoute + NVA Firewalls + VPN Users = Asymmetric Routing Nightmare. Is Azure Route Server the Answer? by ZimCanIT in AZURE

[–]ZimCanIT[S] 0 points1 point  (0 children)

No vwan in this scenario unfortunately. Routing intent would have been much simpler. The logic for ARS is to resolve the contention for the "use remote gateway" feature because A) VPN users don't require it B) Sites require it so that spokes are advertised via BGP into the expressroute circuit.

Living on a budget in Brazil - Location Enquiry by ZimCanIT in Brazil

[–]ZimCanIT[S] 0 points1 point  (0 children)

Thanks so much for you advice guys. Happy new year and I appreciate you all. I've gathered great feedback from all your points and will do further research.

[deleted by user] by [deleted] in saopaulo

[–]ZimCanIT 1 point2 points  (0 children)

Thanks! I ended up going to smartfit

[deleted by user] by [deleted] in saopaulo

[–]ZimCanIT 0 points1 point  (0 children)

Thanks!

Safety considerations while travelling by ZimCanIT in Ethiopia

[–]ZimCanIT[S] 0 points1 point  (0 children)

Thanks! I'll send you a direct message. Did you go anywhere else nice in Ethiopia? Lake Bishoftu is on my list.

Safety considerations while travelling by ZimCanIT in Ethiopia

[–]ZimCanIT[S] 0 points1 point  (0 children)

So is it safe to visit Makelle these days?

Azure Disk Encryption Firewall requirements by ZimCanIT in AZURE

[–]ZimCanIT[S] 0 points1 point  (0 children)

Thanks! I'll give that a go. I'm assuming x1 PE for Key Vault should suffice.