Fortigate to Cisco ASA Site to Site VPN
Nov24

Fortigate to Cisco ASA Site to Site VPN

KB ID 0001717 Problem Continuing with my ‘Learn some Fortigate’ theme’. One of the basic requirements of any edge firewall is site to site VPN. As the bulk of my knowledge is Cisco ASA it seems sensible for me to work out how to VPN both those firewalls together, like so; Well that’s the pretty picture, I’m building this EVE-NG so here’s what my workbench topology looks like; Disclaimer (Read First!...

Read More
Fortigate: One to One (Static NAT)
Nov19

Fortigate: One to One (Static NAT)

KB ID 0001716 Problem If you have a host that you want to be able to access from the outside of the firewall e.g. a webserver then this is the process you want to carry out. I didn’t find this process particularly intuitive and it highlighted why I don’t like GUI management interfaces, (in 6.4 the menu names have changed, this rendering a million blog pages inaccurate!) I’m setting this up in EVE-NG on the work bench...

Read More
EVE-NG Deploying Fortigate v6 Firewalls
Nov12

EVE-NG Deploying Fortigate v6 Firewalls

KB ID 0001714 Problem The firm I work for are looking at a replacement for Cisco ASA as their preferred firewall of choice. We are looking at Fortinet to fill this gap, but as a product/solution it’s something I know very little about. So the best way to learn is to deploy and play with, and the test bench weapon of choice for discerning technical types is EVE-NG. So can I deploy the newest (v6.4.2 at time of writing) Fortigate...

Read More
Fortigate Blank Web Page?
Nov12

Fortigate Blank Web Page?

KB ID 0001713 Problem I’ve been trying to deploy a Fortigate into EVE-NG (article to follow) this week. I could get the appliance running fine but when I tried to access the web management console all I got was the following. Note: I have a couple of management VMs in EVE-G (Windows 7 and Server 2012), they had a mixture of IE, Chrome and Firefox on them but still I could not get in? Solution All forums yielded no more info...

Read More
Fortigate: Show IP (DHCP) From CLI
Nov11

Fortigate: Show IP (DHCP) From CLI

KB ID 0001712 Problem I was having some problems setting up a Fortigate (VM64-KVM) firewall, and I needed to know, (at command line,) how to view the address that had been assigned to it via DHCP. View Fortigate DHCP address (from CLI) The syntax required is; config system interface edit ? Note: Dont Forget the “?” at the end, it will not show onscreen as seen below. View Fortigate DHCP address (from GUI) If the GUI/Web...

Read More