Видео

Check the timeout value of connection Provide output of session list. Diag sys session filter src <src_ip> Diag sys session list

May be by mistake the session timeout is set to 0 unlimited , default should be 3600

@@rosatechnocrat timeout looks to be the default 3600. For some reason the user and destination user are two different users even though its going to a papercut server

Looks like that may be just because of whoever last was hitting the server when the agent is checking.

Thanks for feedback.

Glad it helped and thanks for feedback

Hi @Mspower8 , sure will make more videos. Will try on possible options and troubleshooting

Do an telnet on port 4443 from FGT to FSA IP address . Verify if reachable

@@rosatechnocrat sure I will check that, but I don't think it's an issue with the reachability as the File Submission port on FSA which we have configured from the FortiGate under the Security Fabric is in the Same Network and there is no additional firewall in between, apart from this what could be the reason as flow based scenario worked perfectly fine but when we changed the state from flow to the proxy based the vdom status which we are testing starts showing down in the FSA while the status for the root vdom is green.

@@faisal04021987 4443 port is only required in inline scanning while not in passive scan.

@@rosatechnocrat Noted.

You are looking for individual or group

@@rosatechnocrat individual

@@rosatechnocrat I am looking for individual training

Fortisandbox

You're welcome!

Hi Rpinto : First let’s answer the second question : Yes you need a DoS policy even if you have no service running on the firewall or the FGT itself. But, only if you have a web service or any service inside your network that is accessible from outside, attacker can target that and can cause a dos attack. Dos policy actually depend on the placement of device. If connected to internet or internally used. 1st question answer : even it can be used on inside interface but generally people avoid to configure on inside. It can be very useful on inside interface if you find some already breached within network or if you can baseline your internal traffic as well

@@rosatechnocrat thanks

Glad you enjoy it!

You can by by using SNMP monitoring or using automated scripts. There is already a video on how to run automated script. Check my existing videos

Thank you! Will do!

Thanks rajpandey for feedback. Will try my best to provide all possible day to day issues

Glad it was helpful!

ruclips.net/video/zNr2uMhPmL8/видео.html

Glad you liked it!

Sure will try asap

Thanks @rajpandey for feedback

Hi Selva , Thanks for feedback

Hi Yusman, Thanks for feedback. Sure will try my best.

Any time! Thanks for watching and your feedback.

Thanks

Hi Rejo, will be uploaded by tomorrow or Sunday max

Glad to hear it!

Sure … will do asap

Fortianalyzer is not a Netflow collector. Fortianalyzer does not process netflow. So fortianalyzer you can not use.

Hi Selva, Configuring multiple collector is only from Version 7.2.8 onwards. In the new firmware version (7.2.8, 7.4.2, and later), it is possible to configure multiple netflow collector. Prior to these versions only one Netflow is possible. Please check your version. After these versions you can use below commands config system netflow config collectors edit 1 set IP edit 2 etc.....

@@rosatechnocrat Thank you very much. My version is 7.0 2. Thanks a lot 🙏

Welcome.. Glad it was helpful for you.

Hi Muhammad, Sorry for delay, Part 2 will be out tomorrow.

Hi Kiran. Thanks for feedback. I have received my lab fortiweb license. Will start fortiweb

Awesome. Yes please similar video for FortiManager

Glad you like them!. Thanks

Sure .. will try

@@rosatechnocrat sir actually im adding device in forti Analyzer but no connectivity error showing in fortigate firewall.. Please address this issue and make video on this.

@@PratikWaghmare-gz8hr send me screenshot of the error at Ashwani.yadav088@gmail.com

@@rosatechnocrat sir please check your email..i have shared you SS of the errors.

Thanks Raguwanshi.. Glad it was helpful.

@@rosatechnocrat Thanks I did web based upgrade and found no issues. As my database was low so no rebuild was required

Thanks Kiran and sorry to keep you waiting for your request. I am trying to grab a Fortiweb device for my lab. I will get it by this week and will start Fortiweb as well.

Glad it was helpful for you :) thanks for feedback

Sure let me check. I will try

There will not be performance impact but also depends on model of firewall size of traffic. The delay will be in file downloading or receving files as the fortigate will not release the file until verdict from FSA is received.

Glad it was helpful!

You're welcome!

Glad it was helpful!

Ok coming soon

Thanks saemon for feedback

Hi Kiran, Sure SSL VPN will be next and Fortiweb also I will try ASAP.