A basic question: Would Websocket app (TCP 443) traffic be filtered by a
policy with a Web Filter profile? Or do we need to match it with
Application Control in a separate policy before or after the web filter
policy?Thanks, Toshi
I'm working on migrating my home OpenSUSE machine I'm using for
freeradius server to authenticate admin and VPN users on my FG40F(7.2.8)
from Leap 15.3 to 15.5(on a new machine). Obviously 15.5's repo has a
newer version of freeradius-server image.Th...
As all the other users at FortiCloud must have gotten, I received an
announcement email per email account for 2FA auth enforcement starting
June the 7th.My question is if it would apply to this Forum login
account. I've kept using my old account emai...
When we configure this SSL VPN MAC address filtering, what system limit
would dictate the max number of MAC addresses we can configure on an FGT
(no
vdom/muti-vdom)?https://community.fortinet.com/t5/FortiGate/Technical-Tip-MAC-address-check-on-SSL-VP...
Please let me make sure the order a FGT examine policies.If there is a
specific policy from a specific interface like "lan" to another specific
interface like "wan1" with "any" source and "any" destination, it would
be examined before another policy ...
"vap-switch" appears only at the SSID's interface config and that's the
only option for SSIDs. And, this should be the same between 6.4 and
7.2.Below is an example from my 40F with 7.2.8.config system
interfaceedit "fapxxxx" set vdom "root" set ip 19...
We never used/relied on FortiConverter to do migration like what you're
doing. But I'm assuming you at least need to match "vdom-mode" global
setting to drop the multi-vdom config file on to the new device.
Try....config sys global set vdom-mode mult...
I searched for this as well. But it seems to happen only with Quarlys. I
haven't heard any customers who use SSL VPN tunnel mode and get annual
PCI audits got this "predictable resource location" flagged and failed
because of it. I don't think anybod...