Hi, We have a Fortigate firewall that I introduced with the GW category (routers layer 3 device), all information seems ok according to the capture. But when I look at the tools > watchdog there is a problem with the routing interfaces not being recognized ? It's a same with GSW Is there a solution to fix this? Regards, Nicolas
On Tue, 20 Dec 2022 14:43:53 +0100 Biselx Nicolas <nicolas.biselx@epfl.ch> wrote:
We have a Fortigate firewall that I introduced with the GW category (routers layer 3 device), all information seems ok according to the capture.
But when I look at the tools > watchdog there is a problem with the routing interfaces not being recognized ? It's a same with GSW
Is there a solution to fix this?
That depends on what reality looks like. This watchdog check is there to alert of the suspicious case of a router being added to NAV, yet it has no actual detectable ports with an IP address that could be categorized as a route port. Do you know if the Fortigate firewall properly supports the IP-MIB? -- Sincerely, Morten Brekkevold Sikt – Norwegian Agency for Shared Services in Education and Research
No, I don't know, Should I add these MIBs to NAV ? https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG-FAZ/2400_System_Settings/2... Regards, Nicolas Le 21.12.22 à 16:39, Morten Brekkevold a écrit :
On Tue, 20 Dec 2022 14:43:53 +0100 Biselx Nicolas <nicolas.biselx@epfl.ch> wrote:
We have a Fortigate firewall that I introduced with the GW category (routers layer 3 device), all information seems ok according to the capture.
But when I look at the tools > watchdog there is a problem with the routing interfaces not being recognized ? It's a same with GSW
Is there a solution to fix this? That depends on what reality looks like. This watchdog check is there to alert of the suspicious case of a router being added to NAV, yet it has no actual detectable ports with an IP address that could be categorized as a route port.
Do you know if the Fortigate firewall properly supports the IP-MIB?
On Thu, 22 Dec 2022 08:49:29 +0100 Biselx Nicolas <nicolas.biselx@epfl.ch> wrote:
No, I don't know, Should I add these MIBs to NAV ? https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FMG-FAZ/2400_System_Settings/2...
Adding MIB modules to NAV wouldn't help unless you also wrote the code needed to interpret the information they represent. The above page claims support for RFC-1213 - some of the base MIB modules in MIB-II were defined in that RFC, before they were later made into separate RFCs. RFC-1213 should mostly cover what we need from IP-MIB, though. What actual ports does NAV report for your Fortigate device? -- Sincerely, Morten Brekkevold Sikt – Norwegian Agency for Shared Services in Education and Research
participants (2)
-
Biselx Nicolas -
Morten Brekkevold