Table of Contents Intro Decide whether to use Wildcard user on FAZ/FMG/FGT or only specific users. RADIUS Configuration - Windows NPS Install Network Policy Role (NPS) Open NPS management console Integrate NPS with local Active Directory Create in NPS console RADIUS clients signifying each network device (FGT, FAZ, FMG …

I already wrote how to delete the default admin account from the Fortigate https://yurisk.info/2021/06/09/rename-or-delete-default-fortigate-admin-administrator-account/, and today I will show you how to do the same in Fortianalyzer, Fortimanager, and Fortigate. Video: Your browser does not support the video tag. I also write cheat sheets …

Not technical, but (hopefully) helpful list of tips learned the hard way by myself or from others before me. Color code your Terminal/CLI sessions. All terminals have this feature, I use SecureCRT and change background of the saved sessions according to the importance - backbone black, production - gray, lab - light …

Every technical field has its own jargon/abbreviations and it is true for the Fortinet world as well. The picture below lists major products with their code names as used by the community. I also write cheat sheets/scripts/guides to help in daily work, so make sure to check …

Table of Contents Sending test mail from FAZ Enable real-time debug Restart fazmaild mail daemon on FAZ Sending mails via default Frotinet servers Sending test mail from FAZ FAZ has a command to actually send a test mail that checks if sending mails to/via the configured mail server works …

Why did I do such report? Some of our clients are using VM Fortianalyzer (FAZ) which comes with the volume licensing of received logs, and so alerts frequently on logs intake exceeding this license. Other than buying additional license, I can drill down with the FAZ help on top policies …

Can we send logs from non-Fortinet devices to the Fortianalyzer? This question pops up from time to time and the short answer is yes, for sure - any device that can send its logs in syslog format (read any device of Enterprise level today), can also send the logs to Fortianalyzer …

Table of Contents General Health Communication debug Logs from devices Licensing Example debug session on Fortianalyzer Show connected to the FAZ devices General state of FAZ (version, serial, HA status, license status) Performance stats (appliance FAZ will have more data) Running processes and CPU load Logging devices with quotas for …

In this short visual guide I will show how to create a custom report from your own SQL query in Fortianalyzer. Fortianalyzer comes with plethora of datasets and reports defined - more than 800. My issue with all of them - they are overly complex and are geared more towards C-level management …