So a lot of people that have smaller units have noticed in the latest versions (5.4+) that the PCAP link is now gone. Well, this video will show you how to get to that page so that you can carry out PCAPs from the GUI. We know that not everyone is as good at the […]
Tips and Tricks
Session Based Network Issues on 7060E?
So if you are running a 7060E chassis in your enterprise and you are suddenly experiencing strange behavior relating to session based traffic, disable the TCP-Options setting in config global. This is on by default and enables the the client and server to negotiate MSS, window scaling, selective acknowledgements, timestamps, and NOP. These are completely […]
Advanced logging
Advanced logging This section explains how to configure other log features within your existing log configuration. You may want to include other log features after initially configuring the log topology because the network has either outgrown the initial configuration, or you want to add additional features that will help your network’s logging requirements. The […]
How to see errors and discards on FortiGate interfaces
Question: How do I go about seeing interface statistics such as discards, errors etc? I get this question a lot and figured I would make a post about it to help the masses. There is a simple way to do this. In the CLI there is a command called “fnsysctl” that you can expand upon. […]
Read The Damn Release Notes
I made a post about this on our forums (first post on the forums actually haha) but decided I needed to make a front page post. Please save yourselves the heart ache and grief and just read the damn release notes before you upgrade firmware versions. Technician friend of mine apparently doesn’t like reading too much. […]
Indexing of Old Archived Logs on FortiAnalyzer
Question: The FortiAnalyzer divides logs into indexed and archived. Once an old log is archived, can this be brought back in order to be indexed? Answer:# exec sql-local rebuild-db http://kb.fortinet.com/kb/documentLink.do?externalID=FD36458 Awesome tip from Paulo R on the Fortinet Forums. See the thread by clicking here
Custom FortiAnalyzer Report To See Blocked URLs for a Category
Ian on Fortinet’s forums asked a good question. You can see the question below: Hi I want to create a report that allows me to select a category and then to list all the activity for users where the URLS match that category. For example a report that lists user name, source IP, date time, […]
FortiAuthenticator For Windows Active Directory Self Service
Using FortiAuthenticator To Perform Account Self Service For AD I was asked a question on the FortiAuthenticator 4.0 Admin Guide about whether or not the FortiAuthenticator was needed in order for a FortiGate to communicate and authenticate with Windows Active Directory. The answer to that question is a resounding “NO” but it did remind me […]