By default Fortigates come with all their LAN interfaces on a hardware switch. You might want to change this so you can use these as seperate interfaces
- Delete all the policies attaches to the LAN network
- Removed DHCP from the Lan Network
Next in CLI run the below
configure system virtual–switch
- By using operating system performance monitors, such as the Microsoft Performance Monitor utility for Windows operating systems or the iostat command for Linux operating systems.
- By using Windows PowerShell in Windows Server 2012 to collect network utilization (and other information). When using metering ACLs, you can measure the total network traffic sent and received by a virtual mach ine. To collect performance characteristics for the virtual machines in a VPG, using PowerShell, do the following:
When trying to access another user Onedrive via the Admin portal of 365 , the new gui shows
“Loading Access Link” and no link is shown
The old Classic view you cannot click on the Access Files
This is due to the Administrator not have an Office 365 License , make sure one is assigned to get access to the App ( onedrive )
Trying to diagnose an issue of a reason why an NPS server would not let a user in and come back with Access-Reject produces the following Reason in the event log
An NPS extension dynamic link library (DLL) that is installed on the NPS server rejected the connection request.
I recommend uninstalling the NPS Extension for Azure MFA Plugin
Retrying the access which should give you some better reason in the event log e.g. The RADIUS request did not match any configured connection request policy (CRP).
Once this is fixed you can reinstall the Plugin and re-authenticate it
Recently I was trying to hide the password 2 field on a netscaler box due to Azure MFA Radius.
The netscaler was brining back the error : Expression syntax error [ount= + “1^”), Offset 15]
It looks like there is syntax errors on guides online , the expression should be
(“pwcount”= + “1”)
Recently trying to setup a secondary virtual server for Citrix , on login the following prompt was displayed
Http/1.1 Internal Server Error 43531
Make sure your Virtual Server has session policies bounded : https://www.carlstalhood.com/category/netscaler/netscaler-12/netscaler-gateway-12/#bind
Microsoft changed the signing of update packages for Windows 7 and Windows Server 2008 R2 devices on the August 2019 Patch Day for the first time. The company signs packages only with SHA-2 since August 2019; it signed them with SHA-1 and SHA-2 previously but decided to drop SHA-1 because of known weaknesses.
To sort out this issue, install the following patches in order (ideally reboot after installing each) and then patch your servers successfully: