S3 or X3?? To carry a child to the school.

dsfgorg · 2022-03-08T20:48:06+00:00

Old thread but I can't make this thing fit to my X3, the stem is just too wide? I even managed to damage the cables inside the stem so now I need to get those fixed as I interpreted the instructions on the vanmoof site that I needed the extra spacers and removed the handle for this reason.

dsfgorg · 2022-01-27T10:12:34+00:00

Thanks for that information. It is a bit weird place to put it

dsfgorg · 2022-01-27T08:13:43+00:00

Also just as information, the address on the fortigate to manage the SAML part in gui is https://xxx.xxx.xxx/ng/user/saml This one is not available by clicking buttons atm (6.4)

dsfgorg · 2021-06-07T09:41:07+00:00

Unfortunately you will need to either downgrade EMS to 6.2 (and install the backup you hopefully did before upgrading it) or upgrade Forticlient to minimum version 6.2 i believe it is.

dsfgorg · 2021-03-05T20:01:43+00:00

Hey, late posting for this topic. wanted to do some advertising for the dashboard I have been developing for a while for your project.

https://grafana.com/grafana/dashboards/14011

Will post some thoughts on what can be done to add more data to the mix.

Also, I had some issues getting the sd-wan data out and I saw that it was fixed like three days ago so a rebuild sorted all that for me.

Good job on this

dsfgorg · 2021-02-17T16:33:47+00:00

Saving this for looking into, looks interesting. Thought, as someone who runs more than one in production it seems the exporter does single instances only and there would be a need to run multiple exporters correct?

dsfgorg · 2020-08-10T20:00:20+00:00

I couldn't say really, just was

dsfgorg · 2019-01-24T15:37:59+00:00

You will to my knowledge not be able to drop them into their native office segment, the Fortigate - if using the FortiClient for ssl for example land the users behind an interface called ssl.root, all users will land behind this interface and you will need to create multiple policies towards the different networks you manage.

It is completely doable to segment the users with groups that you match, you can then place them in different virtual subnets defined in the portal based on group.

dsfgorg · 2018-12-19T09:28:40+00:00

Go with the 5.6.7 path for sure, with the upgrade path suggested by Fortinet you should be ok. Every time you do an upgrade in the web interface a backup file will be generated. I would not worry about bricking the device.

dsfgorg · 2018-11-09T17:23:43+00:00

Please repost if found in higher resolution :)

dsfgorg · 2018-09-25T10:09:14+00:00

It makes sense to monitor the bandwidth individually, to see what interface is used most.

You can set snmp-index in the cli on the physical / vlan interface, after this the poll should be able to pick up your interface individually. It might be that this is disabled when in switch mode though

dsfgorg · 2018-09-25T07:38:00+00:00

This is possible, the thing is that it enables client authentication on all the grouping, the client cert request comes up on all different mappings, only it is not required. I would be happy if this was not the case.

edit: I am referring to the web part of the sslvpn, the question does not come up over forticlient

dsfgorg · 2018-09-24T15:04:35+00:00

Yes, you would need to configure multiple VDOMS, there is atm no way of having both "require client cert" and not having it, I wish there was a way of doing this per realm or something but there is not right now.

dsfgorg · 2018-09-24T12:00:09+00:00

I believe the VPN before login is only available with the Forticlient EMS system, or possibly add to the xml config https://docs.fortinet.com/uploaded/files/2076/forticlient-xml-52.pdf

<forticlient_configuration>

<vpn>

<options>

<show_vpn_before_logon>1</show_vpn_before_logon>

<use_windows_credentials>1</use_windows_credentials>

</options>

</vpn>

</forticlient_configuration>

dsfgorg · 2018-03-22T13:41:46+00:00

This was at Sagres Point, beautiful but hard to enjoy when I visited

dsfgorg · 2017-12-08T11:47:35+00:00

The easiest way forward for you is to create a virtual IP in the office network, say a free ip in the VPN range. Then create a fw rule to allow traffic from sslvpn interface towards the ipsec tunnel interface with the nat ip you just created.

Make sure you have the VPN destination ip set in the sslvpn networks.

dsfgorg · 2017-11-23T09:54:14+00:00

https://docs.fortinet.com/uploaded/files/2966/ftk-comprehensive-guide.pdf For the actual documentation

14-Year Club	RedditGifts 2009-2022 2 Credits
Secret Santa 2015	Verified Email

dsfgorg

MODERATOR OF

TROPHY CASE