High Availability with FGCP (Expert)
This recipe describes how to enhance the reliability of a network protected by a FortiGate unit by adding a second FortiGate unit and setting up a FortiGate Clustering Protocol (FGCP) High Availability...
View ArticleIPsec VPN Troubleshooting (Video)
In this video, you will learn how to troubleshoot a site-to-site IPsec VPN that provides transparent communication between a Headquarters FortiGate and Branch office FortiGate. This video will show you...
View ArticleISFW and Cooperative Security Fabric (Video)
In this video, you’ll how to install two Internal Segmentation Firewalls behind an external FortiGate. Once these FortiGates are installed, you will set-up a Cooperative Security Fabric between the...
View ArticleSSL VPN for users with passwords that expire
In this recipe, you will learn how to configure an SSL VPN portal for users with passwords that expire after two days. Users will be warned after one day about the password expiring and will have one...
View ArticleLogging Traffic and Using FortiView (Video)
In this video, you will learn how to configure logging to record information about sessions processed by your FortiGate, and use FortiView to look at the traffic logs and see how your network is being...
View ArticleRedundant Internet connections
In this example, you will create a WAN link interface that provides your FortiGate unit with redundant Internet connections from two Internet service providers (ISPs). The WAN link interface combines...
View ArticleIPsec VPN with FortiClient (Video)
In this video, you will allow remote users to access the corporate network using an IPsec VPN that they connect to using FortiClient for Mac OS X, Windows, or Android. Traffic to the Internet will also...
View ArticleSSL VPN with certificate authentication
In this recipe, you will configure an SSL VPN tunnel that requires users to authenticate using a certificate. This recipe requires that you have three certificates: CA certificate server certificate...
View ArticleConfiguring Remote Extensions in FortiVoice Enterprise
Callers can connect to remote extensions through auto attendants or through call cascade transfers. A remote extension reaches an external phone by automatically selecting a line from a trunk and...
View ArticleFortiOS 5.4.1 category added
A FortiOS 5.4.1 category has been added to the Cookbook website, containing all the videos/recipes that work with this firmware version. If you have trouble using any of these recipes with FortiOS...
View ArticleConfiguring Follow Me Settings in FortiVoice Enterprise
Each SIP and analog extension comes with its default user preferences, such as the follow me settings. Follow me allows a call to an extension to be transferred to another destination when you are not...
View ArticleCustom IPS Signature Syntax Guide
IPS Signature Syntax When making a custom IPS signature for your FortiGate, it is helpful to understand the syntax in creating the signatures. There is a section in the FortiOS handbook, but we are...
View ArticleManaging Call Handling in FortiVoice Enterprise
Each SIP and analog extension comes with its default user preferences, such as how the unit manages the call process. For example, you could configure the process to forward a call to another number on...
View ArticleAdding FortiAnalyzer to a security fabric
In this recipe, you will add a FortiAnalyzer to a network that is already configured as a Cooperative Security Fabric (CSF). This will simplify network logging by storing and displaying all log...
View ArticleConfiguring Remote Cameras in FortiRecorder
The following scenario is intended for users who are accessing their cameras remotely. Remote camera deployment refers to scenarios in which there is a firewall, such as your FortiGate unit, between...
View ArticleNew FAQ page
As you may expect, we here in the Technical Documentation team get asked a lot of questions. Sometimes we even get asked the same question more than once. I strongly suspect that this repetitive...
View ArticleWiFi with WSSO using Windows NPS and Attributes
This is an example of wireless single sign-on (WSSO) with a FortiGate. The WiFi users are students at a school. They belong to a Windows Active Directory (AD) group called WiFiAccess. The Network...
View ArticleWorking with Ring Groups in FortiVoice Enterprise
It is far more convenient to establish a group number that clients can contact instead of manually calling each individual in a particular department. A ring group allows clients to call a single...
View ArticleIPsec VPN for iOS 9
In this recipe, you will use the FortiGate IPsec VPN Wizard to set up an IPsec VPN between a FortiGate and a device running iOS 9. This configuration allows iPhone users to securely connect to an...
View ArticleProtecting a server running web applications
In this recipe, you will use a Web Application Firewall profile to protect a server that is running a web application, such as web mail. In this example, the default profile will be targeted to block...
View Article