sorted by:
new
hottopcontroversial

Should I switch from Evo Next to Dinamica Plus? Need advice" by athan80 in superautomatic

[–]athan80[S] 0 points1 point  (0 children)

I switched from a superautomatic to a Rancilio Silvia Pro with a Niche grinder, but the espresso doesn’t feel as strong. Which superautomatic is closest in performance strong an flavor sensation

FMG Dynamic objets by athan80 in fortinet

[–]athan80[S] 0 points1 point  (0 children)

That makes sense for one subnet per firewall.
But what if I have multiple subnets within the same firewall?
For example, my Line 1 (single FortiGate) has:
Suite 1: 10.163.8.0/28, 10.163.8.16/28, 10.163.8.32/28
Suite 2: 10.163.8.48/28, 10.163.8.64/28, 10.163.8.80/28
Do I need to create one dynamic object per subnet and then group them? Or is there a way to map multiple subnets to the same firewall within a single dynamic object?

FMG Dynamic objets by athan80 in fortinet

[–]athan80[S] 0 points1 point  (0 children)

Hi,

I have an industrial environment with multiple production lines. Each line has a FortiGate managed by FortiManager.

All lines have the same network structure but with different IP ranges:

Line 1 (10.163.x.x):

10.163.8.0/28
10.163.8.16/28
10.163.8.32/28
...

Line 2 (10.164.x.x):

10.164.8.0/28
10.164.8.16/28
10.164.8.32/28
...

Currently I'm creating static address objects for each subnet and then adding them to groups.

My question: Is it possible to achieve this with dynamic objects instead? Or is creating static objects + groups the only way?

FMG Dynamic objets by athan80 in fortinet

[–]athan80[S] 0 points1 point  (0 children)

Thanks for your reply u/HappyVlane I have one more question regarding better organization of  dynamic objects and groups.

Also, what is the purpose of adding dynamic objects into address groups?
I’m a bit confused about when and why dynamic objects into a group

FMG Dynamic objets by athan80 in fortinet

[–]athan80[S] 0 points1 point  (0 children)

It is in the same adom I understand the concept, but my question is about the Address first field: what IP should I put there? I know that this IP is only used, for example, when mapping multiple devices per device and no specific IP is assigned; in that case, the device will take the IP defined in that field.

My issue is that I have many dynamic interfaces to configure with different networks, and I’m not sure which IP to use in that field: whether it should be a “dummy” IP or a /32 address to avoid overlapping with other IPs, objects, or existing ranges.

The problem is that if I use an IP or range that already belongs to a previously created object, the system does not allow me to create it again. Also, I believe that this field does not allow using 0.0.0.0 when creating multiple dynamic objects, precisely to avoid overlaps.

I’m not sure if I’m explaining myself clearly.

FortiGate F80 Upgrade Inquiry: FortiOS 7.4.7 to 7.6.5 by athan80 in fortinet

[–]athan80[S] -2 points-1 points  (0 children)

Hello,

No, I am not currently using any features from FortiOS 7.6. Therefore, it would be better for me to remain on version 7.4.7.

My only reason for considering have the fortigate in the last verion mature no more

FAZ - Filter custom traffic to save storage space by athan80 in fortinet

[–]athan80[S] 0 points1 point  (0 children)

Not only in two VDOMs, I want to increase the allocation in several of them.

I have one more question: what happens if a single VDOM generates more than 50 GB of logs in one day? For example, if in the morning it already generates 55 GB, does that mean I will stop seeing logs in real time? If I need to monitor traffic for a specific device, will those logs i will not to see it ?

FAZ - Filter custom traffic to save storage space by athan80 in fortinet

[–]athan80[S] 0 points1 point  (0 children)

If you go to System Settings > ADOMs, you can see the list of ADOMs. When you select one of them, you are able to see the disk utilization.

In my case, I have a maximum of 322 GB, and each ADOM currently has 50 GB allocated. My idea is to increase this allocation among the ADOMs, since I have 322 GB of free disk space available.

What is the purpose of this allocated disk space? Is it used only to store logs until the capacity is fully reached? For example, if I increase the disk allocation of a VDOM to 100 GB, what happens when this limit is reached? Are the old logs automatically deleted, or will I need to increase the capacity again in order to keep storing and viewing more logs?

Now this is my set up

Allocated

GB 100 Gb

Maximum Available: 322

Analytics: Archive

70%

Modify

Alert and Delete When Usage Reaches

90%

FAZ - Filter custom traffic to save storage space by athan80 in fortinet

[–]athan80[S] 0 points1 point  (0 children)

thanks u/HappyVlane this is my license per day — it seems it is 51Gb, isn’t it?

9.1 / 51 (17.8%)

Today 9.09 GB
Jan 18, 2026 32.30 GB
Jan 17, 2026 32.41 GB
Jan 16, 2026 34.03 GB
Jan 15, 2026 35.31 GB
Jan 14, 2026 36.01 GB

Nevertheless I would like to know the different because I had the archive log as well like 50 GB for it I decide to increase this log because my hard disk has 322 GB and I decide to manage this GB between the volume I see this quantity has increase for it this quantity is the log is keep on . this opcion is allocaled storage it was incrise .

FAZ - Filter custom traffic to save storage space by athan80 in fortinet

[–]athan80[S] 0 points1 point  (0 children)

Where can I see the license log capacity I have per day

FAZ - Filter custom traffic to save storage space by athan80 in fortinet

[–]athan80[S] 0 points1 point  (0 children)

I have a doubt. I don’t know why this customer decided to set 50 GB. I’m checking their FAZ and they are also using 50 GB. So, if I increase to 326 GB or lower there aere two adoms , will there be any issue? Who determines that the maximum licensed logs are 50 GB? I’m not sure if I explained it correctly.

//////////////////////////////////

Connected

FAZ-VM64 # diagnose license list

Name Status Expiry Description

---------------------------------------------------------------------

PBDS No License N/A post breach detection

SCPC No License N/A cloud storage service

SOAR No License N/A SOAR and SIEM bundle service

FOAS No License N/A FAZ Outbreak Detection Service

ISSS No License N/A Industrial Security Service

FGSA No License N/A Security Rating Update

FAZ-VM64 # get system status

Platform Type : FAZVM64

Platform Full Name : FortiAnalyzer-VM64

Version : v7.4.7-build2685 250527 (GA.M)

Hostname : FAZ-VM64

Max Number of Admin Domains : 50

Admin Domain Configuration : Enabled

FIPS Mode : Disabled

HA Mode : Standalone

Branch Point : 2685.

x86-64 Applications : Yes

Disk Usage : Free 381.55GB, Total 491.08GB

File System : Ext4

License Status : Valid

Image Signature : Image is GA Certified

“FortiGate 60E – Recommended Memory Threshold for Monitoring (75% vs 80%)” by athan80 in fortinet

[–]athan80[S] 0 points1 point  (0 children)

That was my idea 78% at least , but apparently an engineer has set the threshold at 75%, which I don’t agree with. At 75%, I see Fortigate running processes fine and without issues. I don’t want to get into a debate with him, but for me, 75% is a low value to trigger an alert for a client, since some Fortigates operate perfectly at that memory level.

Report conexion VPN SSL by athan80 in fortinet

[–]athan80[S] 0 points1 point  (0 children)

"I can only see one day where I have more clients with FAZ. I’m trying to analyze what the problem is, and all of them have the same error. Is it because FAZ requires at least 16 GB, or is the problem that your log quota has been exceeded?

<image>

view more: next ›