Azure Firewall
Azure firewall is a stateful firewall that is managed and cloud-based for our Azure resources. It has been build for high availability that is built in so no need for …
FortiGate Geo-Location
A diagnose command can be used to view more information about geography based addressing. The command displays country and address information for the countries that have been added to firewall …
FortiGate Interface Settings FortiOS 5.6 – Part 2
The FortiGate unit has a number of different options for configuring interface address options Network > Interfaces > Select interface and click Edit Manual – Allow for entering in …
FortiGate Interface Settings FortiOS 5.6 – Part 1
The FortiGate unit has a number of different options for configuring interface Network > Interfaces (Select interface and click Edit) Interface name: Name of interface and MAC address. A physical …
FortiGate DNS FortiOS 5.6
DNS servers resolve domain names (For example www.alastair.co.uk) to IP address. The FortiGate uses DNS servers to resolve names to IP address. The settings for this is under Network > …
Failover internet connection using SD-WAN FortiOS 5.6
Fortigate’s SD-WAN can be setup for a failover (redundant) internet link. For example if an organisation has a fibre connection to WAN1 on the Fortigate and a DSL link on …
Disable SIP ALG
SIP ALG allows the firewall to dynamically open ports for audio traffic as well as the changing of IP address when NAT is used and the inspection of VoIP traffic.
Blackhole
An issue which I have had was when a site to site VPN dropped, traffic for the VPN would be routed out the default route and a session was created.
Setting priority on a PPPoE interface
By default, a PPPoE / DHCP connection is assigned a priority of 5. For static routes by default, a priority of 10 is assigned.
FortiClient with Active Directory Integration (FortiOS 5.4)
FortiClient can be integrated with Active Directory so that users can use their domain username and password to connect to the FortiClient VPN.
Set DNS suffix on FortiClient VPN
When setting up a FortiClient VPN, to allow a client to resolve NETBIOS name of servers or other devices to IP in DNS we need to specify the domain name …
Session TTL cli
To change the time to live for idle sessions for FortiGate in cli
Create VLAN via cli
To create a VLAN on the internal interface by cli, use the following commands
FortiGate DHCP DNS suffix
The primary DNS suffix is the DNS namespace which a computer belongs to.