One source Ip should be able to connect with SSH to
git-codecommit.eu-central-1.amazonaws.comNow this target isn't only one
IP and it's possible that the IP changes often over time.How would you
solve this in a Fortigate?
We currently evaluating fortigate for using it as a client ssl vpn
endpoint.Most of our users have notebooks where they are local
administrators because they have to install software most of the
time.All of this notebooks are domain joined.When they ...
What documentation exists about the forwarding of a authentication on
the ssl vpn webportal to services I present in the portal? If you use
this, what services do you present with using SSO? We have a lot of
internal services, microsoft based, atlass...
Is there any existing solution to use the fortitokens as 2nd factor on
other systems?For example when using ADFS authentication? Or on services
like Office365?If yes, is there documentation about this? I read that
the fortiauthenticator could be used...
boneyard wrote:but for the initial redirect on HTTPS requests there is
no solution. you can't provide the correct certificate for the
https://www.google.com request which get then redirected to the captive
portal page. Is there a way to simply disabl...
@ebonick, do you got any progress with the issue? We have a confirmation
from fortinet about the issue.I guess the case number is #1516583.The
problem is, that some connections that dont register correctly shows up
with weird MAC "02:c0:a8:1e:0f:aa" ...
edit 131 set uuid 08030976-c1a5-51e4-cc93-06c235bd4c46 set srcintf
"ssl.root" set dstintf "VPN_XXX" set srcaddr
"RANGE-SSLVPN_192.168.XX.10-250" set dstaddr "somehost" set action
accept set schedule "always" set service "services - {40173}" set
logtr...
ebonick wrote:I too had this working, but now can't remember how I had
it working when testing. Can you provide details as to how you did it?
Fortinet says it's not supported and no matter what I do on 5.2.4 I
can't get it working. The Forticlient re...
We found time to implement some bookmarks with SSO: You have to use the
login URL in the bookmarks. If you use any URL that cause a HTTP
redirect the login would not work!If your server uses "login" and
"password" as html input name fields for the lo...
