Fortigate - Block all PING/ICMP and allow PING/ICMP from a specific IP only

Step 1:

Create new addresses or addresses group. (In this example is Trusted PING)

Step 2:

Configure local-in-policy

Edit 1 is to allow ping only for specific IP in addresses group.

Edit 2 is to deny all IP addresses.

From CLI

# config firewall local-in-policy

# edit 1

# set intf "wan1"

# set srcaddr "Trusted PING"

# set dstaddr "all"

# set action "accept"

# set service "ALL_ICMP"

# set schedule "always"

# next

# edit 2

# set intf "wan1"

# set srcaddr "all"

# set dstaddr "all"

# set service "ALL_ICMP"

# set schedule "always"

# next

# end

SAMPLE:

Download Adobe Reader DC offline installer

Use the following link

https://ardownload2.adobe.com/pub/adobe/acrobat/win/AcrobatDC/2200120085/AcroRdrDCx642200120085_en_US.exe

Description:

Remote Desktop connection terminated. RDP disconnected.

Error:

Windows Event ID 1000 Application Error.

Symptoms:

Remote desktop connection disconnected automatically after login successfully.

Resolution:

Remove local resources printer from mstsc.exe.

(Uncheck printer from local recourses)

 

 

Microsoft DNS server cannot be found event ID 4000

Error:

The description for Event Id (4000) in Source (Microsoft-Windows-DNS-Server-Service) cannot be found. Either the component raises this event is not installed on your local computer, or the installation is corrupted.

Cause:

1. DC/DNS server has lost its Secure channel with itself or PDC. (or restore DC/DNS from old backup)

Solution:

1. Point primary DNS to another DC/DNS IP address.

2. Run CMD as administrator. Type command below:

netdom resetpwd /server:<PDC.domain.com> /userd:<Domain\domain_admin> /passwordd:*

Example:  

netdom resetpwd /server:<DC.contoso.com> /userd:<contoso\administrator> /passwordd:*

3. Enter password of Domain\domain_admin  (user you enter in step 2). 

4. Reboot DC/DNS.

 

#Uninstall software manually

 Reason:

1. Unable to uninstall software from Control Panel

2. Software not listed in Control Panel

Solution:

1. Run command prompt as administrator

2. Enter wmic in command prompt. (result: enter to wmic:root\cli mode)

3. Enter product get name in command prompt. (result: name list of software installed)

4. Enter product where name="name of software listed in previous screen that you want to uninstall" call uninstall in command prompt.

4. Enter Y to confirm uninstall in command prompt.

#File Server Permission - Failed to enumerate objects in the container. access is denied

 

Unable to access or delete the folder/file

Solution: 

1. Run command prompt as administrator.

2. Run command as below: (run every single command each time)

• takeown /F C:\Location_Path
• takeown /F C:\Location_Path /r /d y
• icacls C:\Location_Path /grant Administrators:F
• icacls C:\Location_Path /grant Administrators:F /t

(C:\Location_Path = Your folder/path loacation)

#WSUS - Connection Error. An error occurred trying to connect the WSUS server

Solution:

1. Close WSUS console. 

2. Go to c:\users\<currentlogonuser>\AppData\Roaming\Microsoft\MMC.

3. Delete MMC file