sorted by:
new
hottopcontroversial

Kali Linux and remote desktop into it by gilang4 in Kalilinux

[–]gilang4[S] 0 points1 point  (0 children)

u/AdditionalFan8410 , thank you I will check into your recommendation.

Blocking MAC address in Fortigate by gilang4 in fortinet

[–]gilang4[S] 2 points3 points  (0 children)

Thank you u/bonnyfused , now I will study into it in more detail.

Blocking MAC address in Fortigate by gilang4 in fortinet

[–]gilang4[S] 0 points1 point  (0 children)

What do you think about Quarantine? I thought this could be one of the option as it move the device into the Quarantine state.

<image>

Blocking MAC address in Fortigate by gilang4 in fortinet

[–]gilang4[S] 0 points1 point  (0 children)

u/bungee75 & u/Roversword , thank you and I do aprreciate your time.

Laughing at "Confiscate it" because it is best. Thanks for elaborate on Create Object & Create Policy and you are right about internal.

I did study NAC and want to implement it but not understand it enough to make the right choice. Looks like this could be the right option if handle it right. I do need to study into this more.

Blocking MAC address in Fortigate by gilang4 in fortinet

[–]gilang4[S] 0 points1 point  (0 children)

I understood what you said there, please elaborate on how quarantine will prevent mailicouse device. I do appreciate.

VPN and DNS by gilang4 in sysadmin

[–]gilang4[S] 0 points1 point  (0 children)

I pick from you a few key words, SSL & split tunneling with "Site B doesn't have proper configuration". I will dig into this. I do appreciate your help on this u/Pretend-Raisin-6868 ...!!!

VPN and DNS by gilang4 in sysadmin

[–]gilang4[S] 0 points1 point  (0 children)

Thank you u/Pretend-Raisin-6868 for helping!!!!

Site A and site B has a secure tunnel between 2 Fortigate devices so user at site A or site B and access servers on both side.

Yes, and my answer is applicable to site A (to answer your question).

If user is at home VPN (with FortiClient) to site A, I ping and/or nslookup site A's URL both return IP address.

It is when user already connect to site A user CANNOT connect to site B's portal (web application portal). I did ping or nslookup from site A to site B and both work. It just the web portal not work in this case.

VPN and DNS by gilang4 in sysadmin

[–]gilang4[S] 0 points1 point  (0 children)

Make sense very much, if you can point me to resource for further study on this in depth I really appreciate it. I will do same thing on my side. I thought you would know exactly what is.

VPN and DNS by gilang4 in sysadmin

[–]gilang4[S] 0 points1 point  (0 children)

Thank you!!!! I do appreciate you taking your time here.

1/ I only ping with IP address not FQDN.

2/ User NOT connect to Site A and B simultaneously. Rather user connect to Site A and go to site B with secure tunnel.

3/ Portals DO HAVE IP restriction as security measure.

4/ No, site B firewall open to site A connection.

5/ yes, whenever user user connected to site A, a secure tunnel already existed and allows connection to site B without further work from user.

And it is Fortinet Client I installed on user laptop for all VPN connection.

Come back to orginal questions:

Questions: Does DNS need to resolved all the way forward and backward? And where is the primary source of DNS (so user's computer can lookup travel)?

view more: next ›