u/SnooCompliments8283

Hi Everyone,

I would like to setup an https virtual-server on my FGTs but I'm concerned about a few things:

1. Is there any way to stop the FGT validating the cert of the internal app as part of it's healthchecking?
2. Would the 'set http-host' under the 'realservers' configure both the http host header and the SNI field in the healthchecks? Our internal app requires the SNI.

This is approximately what I'm thinking for the config:

config firewall ldb-monitor

edit MN-HTTPS-App1

set type https

set http-get /status

set http-match "200 OK"

[...]

config firewall vip

edit VirtServer_50.0.0.1

set type server-load-balance

set extip 50.0.0.1

set extport 443

set ldb-method first-alive

set server-type https

set monitor MN-HTTPS-App1

[...]

config realservers

edit 1

set ip 10.0.0.1

set port 443

set http-host app1.corp.company.com

edit 2

set ip 10.0.0.2

set port 443

set http-host app1.corp.company.com

Thanks again for any insight.

I bought some gold and silver (allocation) last year and I need to declare it on my Geneva tax return for Wealth Tax. Does anyone know now please?

1. Is this a "Releve fiscal papier" or a "compte banciare ou postal". There's no IBAN, so I'm leaning towards the relevé fiscal papier.
2. BullionVault reports the holdings in kg on 31st December, but also the total holdiing in GBP. To make matters easy, I'd like to convert the GBP into CHF and report this figure. Is this acceptable or do I really have to mess around converting into ounces and using the official metal pricing numbers?

Thanks in advance for any insights.

Could anyone tell me if it would be supported to build a 'Stacked VDOM' on my 1801F FGCP pair and use the npu0_vlinkXs to build an EMAC VLAN with BGP peering between the "north" vdom and the various "app" vdoms?

• Six VDOMs in total
• VDOMs are in NAT mode
• I hear the 1801F has a single NP7 and I can see npu0_vlink0 and npu0_vlink1

Does this config look ok and would there be any concerns about HW Acceleration?

edit ivl-north
  set vdom "north"
  set ip 192.168.0.254 255.255.255.0
  set vlanid 4094
  set type emac-vlan
  set interface "npu0_vlink0"
next
edit ivl-app1
  set vdom "app1"
  set ip 192.168.0.1 255.255.255.0
  set vlanid 4094
  set type emac-vlan
  set interface "npu0_vlink1"
next
edit ivl-app2
  set vdom "app2"
  set ip 192.168.0.2 255.255.255.0
  set vlanid 4094
  set type emac-vlan
  set interface "npu0_vlink1"
next

Any ideas on the above would be greatly appreciated.