About jlim11

jlim11 · 04-16-2024

Description This article explains why the debug error message appears when the IPsec tunnel is not going up:This issue happens while IPSEC VPN settings are properly configured, and the Physical interface is up(In this example, It is port1): Scope For...

jlim11 · 03-17-2024

Description This article describes how to test the speed of the interfaces on a FortiGate. Normally, the traffictest command on the FortiGate and an iPerf server for the speed test are used. Scope FortiGate v7.0 and above. Solution It is not possible...

jlim11 · 03-17-2024

Description This article describes SNAT network behavior when the primary and secondary interface IP address are on the same subnet. Scope FortiGate. Solution When primary or secondary interface IP addresses have different subnets, FortiOS uses the a...

jlim11 · 03-11-2024

Description This article describes how to confirm if SSL VPN connections are using DTLS. After a user connects to SSLVPN, it will be listed under 'get vpn ssl monitor'. And under 'diag firewall auth list'. But these commands will not show any informa...

jlim11 · 08-24-2023

Description This article describes that after installing Collector Agent on Windows AD, there are cases that these errors can appear when selecting 'Show Service Status' and 'Show Monitored DCs' on the Collector Agent. Select 'Show Services Status' w...

User Statistics

User Activity

Troubleshooting Tip: The IPsec VPN tunnel not coming up, with debug message 'ignoring IKE request, interface is administratively down'

Technical Tip: How to perform a traffic test on a FortiGate interface that is using PPPoE as the addressing mode

Technical Tip: SNAT behavior using 'Use Outgoing Interface Address' with a primary and secondary IP address that are on the same subnet

Technical Tip:How to confirm if SSL VPN user is connected using DTLS

Technical Tip: How to fix 'Timed out when getting FortiGate status' and 'Timed out when getting DC agent status' on the Collector Agent

KCS