How to Fix Forti Manager Fortigate out-of-sync – “the category is already set in another filter”

This post is about fixing the Forti Manager and Fortigate firewall out-of-sync error – “the category is already set in another filter” Troubleshooting * Upgrade the Fortigate firewall version to match up the version with Forti Manager, but it does not help * Check the installation log and the error is as below: Fix After

How to Fix Forti Manager Fortigate out-of-sync – “the category is already set in another filter” Read More »

How to Configure Azure Hub and Spoke Topology Part 3 – Forced Tunnel

This Post is the last part of Configuring Azure Hub and Spoke – Configure Forced Tunnel so all traffic (paritcularly internet traffic) can be routed via the IPsec tunnel. Overall Topology Environment *On-prem Environment has a pair of Fortinet Fortigate firewalls with a public IP of 4.4.4.4 *Hub and Spoke are on different subscriptions. Note:

How to Configure Azure Hub and Spoke Topology Part 3 – Forced Tunnel Read More »

How to Configure VRRP between Fortinet and Cisco

This post is about configuring VRRP between Fortinet Fortigate and Cisco Environment Fortigate firewall and Cisco router’s interfaces are configured using sub-interface, the physical interface will also work here. 100 is the VRRP Group ID FortiGate Firewall has a higher priority 255, so it will be the master Cisco Configuration Fortinet FortiGate Firewall Configuration As

How to Configure VRRP between Fortinet and Cisco Read More »

How to Mitigate Fortinet Vulnerability: Authentication Bypass on Administrative Interface

Issue Summary FortiGuard ID: FG-IR-22-377CVE ID: CVE-2022-40684Severity: Critical / CVSS: 9.6 Specific versions of Fortinet FortiOS (FortiGate Firewall) and FortiProxy may allow an unauthenticated attacker to perform operations on the administrative interface via specially crafted HTTP or HTTPS requests. Affected Products FortiOS version 7.0.0 to 7.0.6 FortiOS version 7.2.0 through 7.2.1 FortiProxy: From 7.0.0 to

How to Mitigate Fortinet Vulnerability: Authentication Bypass on Administrative Interface Read More »