Here in this article we will understand how policy routes works in fortigate firewall with scenario. Here is the topology: There are two LAN networks and two ISP connections, requirement is to forward LAN 1 connections towards internet only through ISP1 and LAN2 connections towards internet through ISP2 and LAN1 and LAN2 should be able to contact each other. Now […]
Here in this article let us understand how to create read only administrator for fortigate firewall, so that concerned administrator will have only read only access to the firewall. Creating Admin Profile: Please login to firewall as admin and then click System then click on Admin Profiles then click on Create new Name: Give Any name to the profile For all the access permissions select “Read” mode, […]
Here in this article let us understand how to troubleshoot when DNAT is not working from external to internal network in fortigate firewall Lets say you hosted one internal webserver on port “4444”, firewall has public IP address “101.23.24.35” and your internal server IP address is “10.1.1.10”. The requirement is when someone accessing ip address “101.23.24.35” from external network on […]
Here in this article we will understand how to configure IPSEC site to site VPN between fortigate firewall to fortigate firewall. Topology: Here both ends of the tunnels are fortigate firewall, one side of the tunnel has “192.168.1.0/24” and other side of the tunnel has “192.168.2.0/24” Configuration Of FGT1: Under VPN >> IPSEC tunnels create New tunnel and follow the […]
Here in this article let us discuss two issues 1)Your DDNS domain is updating to private IP instead of public IP address. 2) You are not able to access firewall with DDNS domain name. DDNS domain updating to private IP: First let us understand how DDNS works in fortigate firewall, Under network >> DDNS option as soon as you enable […]
Here in this article we will understand how to configure address object for GEO location in fortigate firewall. This address object can be called in different applications like local in policies, firewall policies etc. To create address object, please click on policy and objects >> Addresses Then create new, in place of category set it as address Name: You can define any […]
Here in this article we will understand how to increase the log storage in fortigate firewall. Log disk is a hard disk in fortigate firewall which will help to store logs based on its capacity for certain time. To check if the log disk is available or not in your fortigate firewall, you can use this command “get sys status” […]
Here in this article we will understand how to advertise routes through IBGP even if there is no exact prefix match in routing table. By default, IBGP will advertise prefix only if there is an exact match in the routing table. To change this default behavior, you need to disable “network-import-check” under BGP settings. By disabling this check, IBGP will […]