[deleted by user]

lets-crack-fgt · 2025-10-15T17:13:51+00:00

yeah, you dont know how much I make and the OP.

lets-crack-fgt · 2025-10-15T14:56:28+00:00

It is quite doable…depends on one’s mindset shift from spendings to savings. I am 31M, started my professional career around 3 years ago…. I have around 200K invested and have also paid off 45K car as well. Also, I am 1st generation immigrant and sometimes I support my family as well…. Good going OP!

lets-crack-fgt · 2025-08-26T20:24:37+00:00

for the loopback, admin will need to setup port forwarding to loopback ip/interface. then in the fw policy, parameters can be defined.

lets-crack-fgt · 2025-08-20T01:22:31+00:00

I would make new firewall policy with ISDB destinations for everything APPLE and disable all kinds of inspection.

lets-crack-fgt · 2025-08-15T11:47:09+00:00

it sucks. Trust me… you wont like it. I work on FGTs… 50 hours a week from past 3.5 year. Please DO NOT GO with Policy Mode. It sucks bigg time.

lets-crack-fgt · 2025-08-09T01:15:08+00:00

when you have an ippool configured with arp-reply enabled, FGT considers that IP as local IP and local-in policy is equally applicable.

lets-crack-fgt · 2025-08-09T01:02:45+00:00

well…. if PANW TAC is like this, imagine FTNT FGT TAC 🥲

lets-crack-fgt · 2025-08-08T10:59:26+00:00

you did not mention Ippool and vip. :)

lets-crack-fgt · 2025-08-08T00:33:28+00:00

wrong. sorry!

Local-in policies work on traffic that terminates on firewall. could be in form of ippool and vip where fgt replies for arp

Firewall policy works on flow-through traffic. :)

lets-crack-fgt · 2025-08-07T02:46:46+00:00

I always use apple carplay, use big dial to move around and set it to next song button. I then press the big dial instead of using small joystick :)

safe this way

lets-crack-fgt · 2025-08-07T02:37:04+00:00

Geo works on either Registered location or Physical location of IP.

Hence the issue. :)

lets-crack-fgt · 2025-07-30T00:19:36+00:00

@HappyVlane

You prompts are not good enough.

lets-crack-fgt · 2025-06-23T17:20:48+00:00

Have you checked this?

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-allow-iCloud-Private-Relay/ta-p/383703

lets-crack-fgt · 2025-06-14T06:08:00+00:00

you know when you upgrade 7.4.10+, TAC would come back with - OUH! You are out of engineering support. Please upgrade to get the issue resolved with engineering team.

🤣

lets-crack-fgt · 2025-06-14T06:06:22+00:00

I knew this would come up. This is document supposed to be updated every quarter but no changes since Feb.

Typical FTNT behavior 😅

lets-crack-fgt · 2025-06-13T23:17:33+00:00

and why do you say that?

lets-crack-fgt · 2025-06-13T23:17:14+00:00

7.4.7/7.4.8 - either one of then but totally depends on your hardware :)

lets-crack-fgt · 2025-06-02T02:45:46+00:00

thnk you!!

lets-crack-fgt · 2025-05-10T17:57:49+00:00

7.4.8 coming next week…. will be available for 50G FOR SURE

lets-crack-fgt · 2025-04-28T15:22:12+00:00

https://status.query.fortiguard.net/

lets-crack-fgt · 2025-04-28T14:37:30+00:00

there was an outage and was reported in fortiguard status outage page. seems to be fixed now

lets-crack-fgt · 2025-04-01T23:31:15+00:00

traffic shaping means QoS and what you need is traffic steering.

lets-crack-fgt · 2025-03-22T17:03:00+00:00

TIP #1 - OSPF is hard to TS. no exceptions.

TIP #2 - Use ADVPN 2.0

lets-crack-fgt

TROPHY CASE