How To Guides

This document describes how to configure Debug level logging on the free FortiClient SSL-VPN client. These logs are useful when debugging issues with the VPN client. First, you will need to unlock configuration changes on the FortiClient. Click t...

Once you have set up the Fortigate SSL-VPN, an IP and port can be found for users to log in to a web portal to download the FortiClient VPN client. To find this IP and port navigate to VPN → SSL-VPN Settings, after logging into your FortiGate VDOM....

A service is an object that holds a definition of the ports and protocols that are required for a specific application to function on the network. Common examples of services:  HTTP: TCP Port 80 HTTPS: TCP Port 443 SSH: TCP Port 22 Remot...

In Forti-OS, you can add single IP addresses (IPv4 or IPv6), and then create groups of these IP addresses. This is required for use in your Firewall policy.  Creating Addresses  Navigate to the Create New Address page. 1. Click 'Poli...

Below are three examples of common Firewall policies and how to configure them via the Forti-OS web UI. The default firewall policy is set to 'DENY'. This means that NO traffic will traverse the firewall unless you specifically allow it with a fir...

Important On your Firewall's primary IP address (the /31 assigned to your VDOM link interface), port 20443 is used for the HTTPS VDOM user interface. As such, if you NAT port 20443 you will lose access to the WebUI. Please make sure you don't NAT ...

Before you start creating NAT and Firewall policies, you'll want to ensure that your public IP addresses are added to an 'IP Pool'.  This is a range of IP addresses that can be used for other services such as NAT, IPsec, SSLVPN, Firewall Polic...

SNAT rules are required to translate traffic from your servers on their private network, to public IP addresses which are accessible on the internet. To create or modify SNAT rules: 1. Navigate to the 'Central SNAT' page, under the 'Policy & O...