Hi,
We have a Fortigate firewall that I introduced with the GW category (routers layer 3 device), all information seems ok according to the capture.
But when I look at the tools > watchdog there is a problem with the routing interfaces not being recognized ?
It's a same with GSW
Is there a solution to fix this?
Regards,
Nicolas
On Tue, 20 Dec 2022 14:43:53 +0100 Biselx Nicolas nicolas.biselx@epfl.ch wrote:
We have a Fortigate firewall that I introduced with the GW category (routers layer 3 device), all information seems ok according to the capture.
But when I look at the tools > watchdog there is a problem with the routing interfaces not being recognized ? It's a same with GSW
Is there a solution to fix this?
That depends on what reality looks like. This watchdog check is there to alert of the suspicious case of a router being added to NAV, yet it has no actual detectable ports with an IP address that could be categorized as a route port.
Do you know if the Fortigate firewall properly supports the IP-MIB?
No, I don't know, Should I add these MIBs to NAV ?
https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG-FAZ/2400_System_Settings/2...
Regards,
Nicolas
Le 21.12.22 à 16:39, Morten Brekkevold a écrit :
On Tue, 20 Dec 2022 14:43:53 +0100 Biselx Nicolas nicolas.biselx@epfl.ch wrote:
We have a Fortigate firewall that I introduced with the GW category (routers layer 3 device), all information seems ok according to the capture.
But when I look at the tools > watchdog there is a problem with the routing interfaces not being recognized ? It's a same with GSW
Is there a solution to fix this?
That depends on what reality looks like. This watchdog check is there to alert of the suspicious case of a router being added to NAV, yet it has no actual detectable ports with an IP address that could be categorized as a route port.
Do you know if the Fortigate firewall properly supports the IP-MIB?
On Thu, 22 Dec 2022 08:49:29 +0100 Biselx Nicolas nicolas.biselx@epfl.ch wrote:
No, I don't know, Should I add these MIBs to NAV ? https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG-FAZ/2400_System_Settings/2...
Adding MIB modules to NAV wouldn't help unless you also wrote the code needed to interpret the information they represent.
The above page claims support for RFC-1213 - some of the base MIB modules in MIB-II were defined in that RFC, before they were later made into separate RFCs. RFC-1213 should mostly cover what we need from IP-MIB, though.
What actual ports does NAV report for your Fortigate device?
-
Biselx Nicolas -
Morten Brekkevold