Questions tagged [fortigate]

FortiGate is an enterprise next-generation firewall made by Fortinet. It runs on FortiOS. FortiGate provides secure networking capabilities for businesses and organisations. FortiGate integrates with many Fortinet products and provides the visibility and control expected from next-generation firewalls. It can be deployed as a hardware or software appliance.

Official links related to FortiGates:

Mid-range FortiGate 400F FortiFate 400F

46 questions
3
votes
1 answer

How can I get the remote IP / Client IP using NGINX in Docker ?? Also using Laravel

I am running NGINX as part of a Docker package. It is both a webserver and a reverse proxy, and the container has PHP bundled in with it. The front-end web application is built with Laravel. There are some instances where I want to get the…
SScotti
  • 2,158
  • 4
  • 23
  • 41
2
votes
1 answer

Azure run command for Fortinet virtual machine with serial console?

I'm trying to execute with Azure a .conf file that has some command lines that are executable into the Fortinet's serial console in a virtual machine with FortiOS v6.4.3 (Linux based system). I use AZ CLI to execute the script into the virtual…
Elias Arellano
  • 433
  • 5
  • 16
1
vote
0 answers

AWS and Fortigate NGFW yielding IGW_REJECTS_SPOOFED_TRAFFIC

I've got a Fortigate NGFW sitting in my AWS that my company uses for SSL-VPN & IPSEC access to clients. We've recently started hosting our own EC2 servers behind the Fortigate. They're able to reach through the VPNs just fine but aren't able to hit…
A-Big-Moose
  • 43
  • 1
  • 4
1
vote
2 answers

How to capture repeated blocks of multiline text?

I need help pulling out a repeated block of config from a FortiGate firewall config file. It contains various sections in the format below. Each of the vdom config sections ('config vdom' section) end with 2 'end's - I need to pull these blocks out…
Prithvi
  • 11
  • 2
1
vote
1 answer

Ansible: 'fortios_monitor' module "error": { "code": -586, "message": "-586" }

I'm currently attempting to upgrade a FortiGate-60F firewall using fortios_monitor module which is part of the 'fortinet.fortios' collection and as described in FortiOS Collection Issue #107. The current version of the firewall is v6.4.6…
JehhmD
  • 31
  • 3
1
vote
1 answer

Writing parser with | parse kind=regex operator

I`m trying to make a parser for FortiAnalyzer. I recieve log in next format (example from Fortinet documentation) : 2020-05-12 17:01:16 log_id=0001010018 type=event subtype=system pri=information desc="User login/logout successful" user="admin"…
l4serda
  • 13
  • 3
1
vote
1 answer

Nginx Reverse Proxy - websocket config to make Fortigate CLI interface work properly

I am trying to get my fortigate router's web interface behind my reverse proxy, not to be accessible from the internet, but to use my LetsEncrypt cert on my internal network. This is the config I'm using: upstream websockets { server…
1
vote
1 answer

Trigger a Logon Event on specific Domain Controller

Our Problem: We are using FortiGate in our company with ~2200 Clients. Most of them are using Notebooks. Some people can't connect to the Internet, when they come to the office after days working in home office. Our Fortigate is configured to watch…
1
vote
1 answer

Azure: Can't Deploy FortiGate from ARM - Error "The 'unknown' payment instrument(s) is not supported for offer..."

This is my exact error: {"code":"MarketplacePurchaseEligibilityFailed","details":[{"code":"BadRequest","message":"Offer with PublisherId: 'fortinet', OfferId: 'fortinet_fortigate-vm_v5' cannot be purchased due to validation errors. For more…
Accendi
  • 627
  • 1
  • 7
  • 15
1
vote
0 answers

Take backup of Fortigate firewall using c#

I want to make a program that takes the backup of my fortigate firewall using C#. I have created a profile on firewall which has read access of configuration and also generated the API key for same. Below is my sample code to do that class…
1
vote
1 answer

SSL VPN connection to a Fortinet firewall with Java

I'm trying to create an SSL VPN connection to a Fortinet firewall with Java. To build up a socket connection in Java is not a problem, but how do I authenticate to the firewall and create the VPN tunnel? Unfortunately, I haven't found any tutorials.…
StanB1234
  • 11
  • 2
0
votes
0 answers

create fortigate span config

I want to create fortigate span via GUI source port: port 5 destination port: port 6 but show the following error message Please use different ports for SPAN Source and Destination. I create other subnet span success how can I fix it ? thanks
Ethan Lee
  • 1
  • 1
0
votes
1 answer

How to allows forced MFA when users connect to an specifis app

I configured my vpn ssl on fortigate to authenticate with Azure AD. I create an conditional access to required MFA. But when user try to connect some days after the application don’t ask for login passWord or MFA. I want to force every connexion of…
0
votes
0 answers

Fortiweb masked subdomain filter

Is there any way to redirect masked subdomains to correct server in Fortiweb? For example, i know that subdomain will be masked like server_name "~^(?[A-Za-z][0-9]{2}([A-Za-z][0-9]){2})\.domain\.com$ and i want to redirect it to correct…
Medet Koilybay
  • 111
  • 2
  • 9
0
votes
0 answers

Fortigate Monitoring with API via Grafana

As I mentioned in the title, I want to monitor Fortigate firewall with Grafana using API. But i'm stuck about that... I tried it with Prometheus but always getting an error like; "server returned HTTP status 429 Too Many Requests" Actually i'm not…
1
2 3