How to configure SD-WAN on Fortigate

[@drtripurahpe8412]

Simple explanation, and effective...

[@glenntembo2693]

Thanks ElastiCourse

[@RK-ly5qj]

VEEERY nice explained. Thx a lot for a hard work ! ;)

[@DailySupport]

kzbin.info/www/bejne/roG4hICOic6spck

[@W4YN0T]

Good vid, but it's a very simple example without any IPsec tunnels and BGP routing. Unfortunately, in most cases, the configuration will be much more complex.

[@tendaimusonza9547]

Well explained ,Thank you

[@DailySupport]

kzbin.info/www/bejne/roG4hICOic6spck

[@NSE.channel]

Nice..

[@thabosthabos7397]

This is only one Fortigate appliance right just that you used NAT or bridged for port 1 and port 2 because i keep hearing you mention original fortigate what does this mean in this instance can you not do all the configs from your private network ? Is there a reason for that ?

[@ElastiCourse]

There is an upstream Fortigate that don't show in the topology that's where traffic goes to reach internet so think of it as ISP router

[@DailySupport]

kzbin.info/www/bejne/roG4hICOic6spck

[@TheDebasmita7]

does this config act like failover.. port1 will have all the traffic and port will have traffic only if port1 goes down

[@rachidouqa]

22:00 how did get to the original fortigate

[@ElastiCourse]

The original Fortigate in this case in the upstream gateway/router that connects me to the internet. The idea is to create congestion anywhere in the network path to emulate real life issues with WAN connections or certain network paths based on metrics and SLAs. But this can be replicated using any other network device that support network throttling or QoS if you want to try it yourself.

[@thabosthabos7397]

following

[@macster1457]

Do you have a video on how to setup Adguard in Docker? - I know pihole does not block KZbin ads, but can Adguard?

[@ElastiCourse]

I don't believe any DNS blocker can defeat KZbin ads. From long testing it seems KZbin won't ever let you do that, and the only solution is browser extension like ublock origin.

[@macster1457]

@@ElastiCourse oh ok, thank you... I have been searching for a while and can't find a solution to this... is there a way to force users to use Pihole DNS.. meaning, prevent them from using another dns server?

[@ElastiCourse]

Yes you can block DNS to other websites using network firewall if you have, like fortigate or similar, just make sure to enable Pihole IP only to talk to the outside DNS server say cloudflare, and block all other IPs

[@csmk7825]

Hi Does a firewall protect my web site or network 100% from a DdoS attack And thanks

[@ElastiCourse]

Yes you can check the DDoS video I published for instructions on how to setup the edge protection with strict 8 hour ban timer, you can change the ban to 24 full hours for extra protection kzbin.info/www/bejne/r3jTh5Rsl5WJodU

[@csmk7825]

@@ElastiCourse thanks

[@e.mnimeshkamarasinghe397]

Can I have a coupon for your Introduction to Fortigate Firewall in Udemy please ??

[@ElastiCourse]

Here is the best price coupon valid for 5 days! Enjoy and please leave a review when you finish the course www.udemy.com/course/introduction-to-fortigate-firewall/?couponCode=33A20DC175A0F17D166D