FortiGate inter-vDOMs communication using EMAC vLAN
The goal of my setup was to host multiple vDOMs on a FortiGate while routing all the inbound/outbound traffic toward a proxying Virtual Domain, himself reaching a so called WAN vDOM.…
Server Load Balance vIP's on FortiGate's
To cut a long story short, I wanted to be able to Geographically lock HTTP/HTTPS requests towards back-end web servers behind a FortiGate hosting a single WAN IP address. Hum, well, it's really not as easy as it sounds...…
WhatsApp policies on a FortiGate
WhatsApp, ahh good god, controlling WhatsApp is a nightmare, that app goes anywhere, pretty much.. Facebook, WhatsApp backend of course but many other destinations are needed as well.…
Faster OSPF convergence on FortiGate FGCP cluster fail-over
I've been testing a few configuration tweaks in order to reduce my OSPF routing convergence to the bone, a sub second fail-over. Here are the optimal FortiGate Cluster Protocol settings I've found out..…
FortiAuthenticator; A few tips...
Just a few FAC tips and info's... While LDAP(s) is one of the main Windows AD authentication protocol, it isn't very convenient or best practice at the edge level. Typically, an Enterprise based Users Authentication scheme would leverage RADIUS from any edge facing devices on a RADIUS Server. The…