u/ontracks

Hello community, Im once again dealing with FortiNAC, as my company is been back and forwards with it.

For example using Cisco ISE, we configure 802.1x on the switches, Cisco ISE validates certificate or username (if im not mistaken) and thats usually the way to go with ISE.

My question is: whats the equivalent of what I mentioned for ISE on FortiNAC? Does it support 802.1x at all in the same way ISE does? And if it does, is that the common way to go with FortiNAC. If not, well, whats the common way to go?

I got that FortiNAC support a lot of protocols, but thats actually what confuses me, it supports so many stuff that I don't know what to do or whats normally done out there in most scenarios (even though no environments are the same :)

I guess Im asking for a practical aspect, I would like to know how are the most FortiNACs deployed out there, real case scenario in this aspect based on real world experience deploying/managing this monster.

(I know we should get PS for this ands we probably do)

Hello community, im new to meraki and I wanted to clarify something. When setting a warm spare pair, if the upstream device is the dhcp server how can I configure the wan interface IP? when its manually I set a specific IP for each wan and then a virtual IP, but ho does this work when is dhcp?

Greetings community, question about "new" Cisco Secure Client, is this a cloud based solution Firewall-less, managed/configured and intended via the Cisco Secure Client Cloud Management strictly, or is this just a fancy name for what had always been AnyConnect off an ASA/FTD?

Hello community, we have in our DC a (HA pair of) FortiGate firewalls and also MX appliances at our remote locations.

We will be adding a Meraki MX in our DC "next to the Fortigate" to leverage Meraki AutoVPN and connect all the remote locations to our DC via that new Meraki MX. My question is:

1- Is it possible to do for example OSPF between our Fortigate and MX to advertise our DC subnets into the meraki appliance and then advertise those subnets into our remote locations? I am very familiar with Fortinet but not meraki and Im not sure if Meraki will allow this design.

Under Site_to_Site_VPN on Meraki I usually see the option to enable VPN advertisement to "local" subnets, so Im not sure if subnets learned via OSPF will appear here for me to enable them.

2- The other way around, will the subnets I learned On the hub MX from the remote locations be advertised to the FortiGates via OSPF?

Any comments/suggentions/ideas will be highly appreciated, thank you all in advance

Hello community, I have a concern with the IPS filters when it comes to where apply client or server filters:

1- Client to internet (client signatures)

2- Internet to servers (servers signatures)

3- Client to servers (both??)

4- Servers to internet (?????)

Hello community, the tunnel interfaces (Network->Interfaces) always seem to be up regardless of the actual status of the tunnel.

Is that the case? Why Im seeing some tunnel interfaces down/up?

Greetings community, I was doing some testing recently with a FMG and I noticed the "Add HA model" option. Whats the use case of that?

Does FMG actually configure the HA settings on 2 firewalls? If it doesn't, how's that better than simply adding the cluster using "discover device" like normal and let FMG to realize it's a cluster on its own.

Thanks to everyone in advance.