Fortinet




Send logs from non-Fortinet devices to Fortianalyzer via Syslog

in Fortinet
#FortiAnalyzer #Fortigate
Can we send logs from non-Fortinet devices to the Fortianalyzer? This question pops up from time to time and the short answer is yes, for sure - any device that can send its logs in syslog format (read any device of Enterprise level today), can also send the logs to Fortianalyzer …



Fortianalyzer diagnose and debug cheat sheet

in Fortinet
#Fortianalyzer
Table of Contents General Health Communication debug Logs from devices Licensing Example debug session on Fortianalyzer Show connected to the FAZ devices General state of FAZ (version, serial, HA status, license status) Performance stats (appliance FAZ will have more data) Running processes and CPU load Logging devices with quotas for …



Fortianalyzer Custom Reports from Custom Datasets Visual Guide How-to

in Fortinet
#Fortianalyzer
In this short visual guide I will show how to create a custom report from your own SQL query in Fortianalyzer. Fortianalyzer comes with plethora of datasets and reports defined - more than 800. My issue with all of them - they are overly complex and are geared more towards C-level management …



Fortiweb Cookbook: Most Basic Setup - One website, add HTTPS support, Round Robin load balancing between two physical servers, all protections on Alert only, Host header filtration

in Fortinet
#Fortiweb #Fortiweb-cookbook
Task: Taking the basic setup a step further, let's enable HTTPS protocol between clients and Fortiweb for the yurisk.com. Solution. Step 1. Create certificate signing request (CSR) to use in issuing the SSL certificate. I will use Ubuntu server. It does not have to be a server actually hosting …



Fortiweb Cookbook: Basic setup - adding web site access authentication with local and remote (LDAP) users

in Fortinet
#Fortiweb #Fortiweb-cookbook
Task: Continuing the Basic setup, we want to protect access to some pages, namely the root document "/" and "/treasure" with username and password. For this we want 2 kinds of users: local created on the Fortiweb, and remote residing in the Active Directory of the company. Even though it is …



Fortiweb Cookbook: Most Basic Setup - One website, HTTP only, Round Robin load balancing between two physical servers, all protections on Alert only, Host header filtration

in Fortinet
#Fortiweb #Fortiweb-cookbook
Task: publish website yurisk.com, hosted on 2 physical servers: server1 (10.10.10.13) and server2 (10.10.10.14). The site should be available on HTTP only, no HTTPS. Apply preconfigured protection Inline Alert Only. The website's IP address visible to clients is 192.168.13.92. Solution …



Fortiweb Cookbook: content routing based on URL configuration example

in Fortinet
#Fortiweb #Fortiweb-cookbook
I wrote this step by step walkthrough as an answer for the forum.fortinet.com here https://forum.fortinet.com/FindPost/183028 . This example uses Fortiweb 6.2.2 but the configuration is valid at least starting with 5.x. Problem: You want to route user requests according to the …