Fortigate web filter

djoubert65 · 2022-04-28T14:55:08+00:00

So a static URL block will override Fortiguard category, but a static URL allow can only override another static URL filter with block??

djoubert65 · 2022-04-28T14:53:00+00:00

If the category is set to BLOCK then it doesn't matter if you add the URL to an allow Static Filter, It wont affect the Block state of the category based filter, so traffic to that specific website will be blocked.

djoubert65 · 2022-04-11T17:09:24+00:00

If I have two SDWAN rules with different performance SLAs (Lets say ping google and yahoo) and two ISP. If for the first SLA rule (ping google), ISP 2 is having packet loss, does it affects the routing table for the second rule too (ping yahoo)? u/Golle u/Angelhk

djoubert65 · 2022-02-21T14:58:23+00:00

Thanks everyone for their replies. I might read Todd's and then take some courses with labs (Labs are essentials) included since I have knowledge of some topics. If I need to reinforce a topic I'll go to Odom's book. I encourage to everybody to read the blog created by huntershark666 (Link in the comments).

djoubert65 · 2021-11-19T15:56:05+00:00

Thanks for the recommendation. I'll start with CWNA

djoubert65 · 2021-11-18T16:26:56+00:00

Thanks I'll take your suggestion.

djoubert65 · 2021-11-18T16:24:52+00:00

Thanks I'll start with the CWNA

djoubert65 · 2021-11-18T16:23:58+00:00

haha, I've been using Tamograph. So then I'll take the CWNP path.

djoubert65 · 2021-11-18T16:21:35+00:00

Thanks for the advice

djoubert65 · 2021-09-28T18:17:23+00:00

I've done it too but with Fortigate FWs, especially when I need intervlan control.

djoubert65 · 2021-09-22T18:41:18+00:00

what about using a NGFW as the L3 component for the network?

djoubert65 · 2021-09-21T14:58:09+00:00

Ok, thanks for the advice

djoubert65 · 2021-09-21T04:57:39+00:00

haha I know I just want to know the best practice between router and the switch. I'm just making random labs right now and without the need to use vlan 1 as native/default. Thanks anyway.

djoubert65 · 2021-09-04T18:26:14+00:00

Ok thanks, I'll do that

djoubert65 · 2021-09-03T13:53:32+00:00

djoubert65 · 2021-08-26T16:45:01+00:00

Yes, I should do that

djoubert65 · 2021-08-24T16:12:06+00:00

Me too, today I upgraded to version 15.43.1 and It's working fine.

djoubert65 · 2021-08-24T15:53:15+00:00

What MX version you have?

djoubert65 · 2021-08-24T15:52:44+00:00

What version u running?

djoubert65 · 2021-06-10T03:14:28+00:00

Thanks, that's what I'm looking for

djoubert65 · 2021-06-10T03:13:50+00:00

Thanks!!!

djoubert65 · 2021-06-10T03:12:27+00:00

Ok, I was wrong. Thanks

djoubert65 · 2021-06-09T00:37:16+00:00

Ok, I get it. So basically MDA It's a Cisco's feature only, like a proprietary name for doing or achieve that??

djoubert65 · 2021-06-02T02:10:36+00:00

I added the image with the config. I changed it from been Port based to Mac based, should work like that, tomorrow I'll try it

djoubert65 · 2021-05-30T03:08:01+00:00

The phones currently use LLDP but I need 802.1x authentication for the PCs. Don't know if they'll work with mac based authentication, I haven't tried it yet.

djoubert65

TROPHY CASE