Use LLDP on FortiGate
Enabling LLDP reception allows the FortiGate to receive and store LLDP messages, learn about active neighbors, and makes the LLDP information available. LLDP can be activated globally: config system global…
IGMP Snooping Querier with Managed FortiSwitch
⇒Here I wrote how to configure a FortiGate with managed FortiSwitches as IGMP querier. It is a good solution if the multicast traffic has to pass the FortiGate. If the multicast…
IGMP Querier with Managed FortiSwitches
If you need to configure an IGMP querier on managed FortiSwitches, you find nothing in the documentation. Once you know how it works, it is very simple. The interface of…
FortiGate “Deny: DNS Error”
Fortigate firewalls do inspect the data stream. This is also true for DNS (Domain Name Service). Sometimes you will see the error: "Deny: DNS error" in the logs Having a…
Format FortiGate diag sniffer packet for Wireshark
On FortiGate firewalls you got the command: diag sniffer packet [interface] '[filter]' [verbose level] [count] [tsformat] Details you find ⇒here. If you just want to verify, if a packet passes the…
Dump FortiGate Config into TXT, CSV or HTML
Sometimes you need to document your firewall rules. To do this, I wrote a perl-script to create a CSV file. Importing CSV into a spreadsheet is a good way for…