Re: Intermittent site issue from Office to AWS

amrit · 01-31-2024

Description This article describes how to advertise a static route with a gateway IP in the BGP or ADVPN. Scope FortiOS 6. x.x, 7. x.x. Solution If an advertised static route in the BGP includes a gateway IP, the BGP next hop address will point to th...

amrit · 12-04-2023

Description This article describes how to Synchronize FortiClient Endpoints/Users Across the Security Fabric. Scope FortiGate v6.x.x and v7.x.x. Solution When FortiGates are connected in a security fabric setup, the firewalls can only show the local ...

amrit · 12-03-2023

Description This article describes the scenario when Host machines remained quarantined despite being removed from the quarantine/banned IP list. Scope FortiGate v5.x.x, v6.x.x and v7.x.x. Solution When FortiGate triggers rate-based IPS signatures, f...

amrit · 11-26-2023

Description This article describes that the SSL VPN client certificate authentication prompt will appear for all the groups even if it is enabled for a single group. FortiGate v6. x.x and v7. x.x. Solution If the client certificate authentication is ...

amrit · 08-28-2023

Description This article describes that WSSO SSID users fail to authenticate when using a local group with a Radius server but can authenticate directly with Radius server authentication. Scope FortiGate v6.x.x and v7.x.x. Solution Example: FortiGate...

amrit · 04-21-2024

As you mentioned, the server can see the DHCP discover messages(I assume that the above packet capture is taken on the server) but sends a reply with an ICMP error port unreachable, which implies that the DHCP service is not running on 10.5.1.6. The ...

amrit · 04-21-2024

Capture ESP traffic on the wan interface of the firewalls(When issue is present): di sniffer packet any 'host ' 6 0 a and decrypt the esp traffic using Wireshark. This capture can also be performed from GUI network--> diagnostics. In the decrypted pc...

amrit · 04-07-2024

Don't use the relay type"IPsec" becuase this option is for assigning DHCP addresses to the remote VPN clients (for example dialup IPsec). In this case, you should use the type as "Regular" https://docs.fortinet.com/document/fortigate/6.4.5/administra...

amrit · 04-01-2024

There is a known bug in FortiOS 7.2.8--> 925554--> On the Network > Interfaces page, hardware and software switches show VLAN interfaces as down instead of up. The actual status of the VLAN interface can be verified using the commandline : https://do...

amrit · 03-24-2024

What Foritgate Model do you use?In the case of NP7 and NP6 Platforms(Including lite versions) under heavy load situations, packet reordering problem can be handled by the following command config firewall policy set delay-tcp-npu-session enable Pleas...

User Statistics

User Activity

Technical Tip: How to advertise a static route configured with a Gateway IP in the BGP or ADVPN

Technical Tip: Synchronization of Forticlient Endpoints in Fortigate Security Fabric

Technical Tip: Rate based IPS signature and quarantine/banned IP list default behavior

Technical Tip: SSL VPN client certificate group level authentication default behavior

Technical Tip: FortiGate WSSO SSID Authentication Local Vs Radius

Re: Trouble Receiving DHCP Packet Over S2S IPSec Tunnel To Azure

Re: IPsec tunnel stability issue - two 40F

Re: Trouble Receiving DHCP Packet Over S2S IPSec Tunnel To Azure

Re: Firmware 7.2.8 issue - interface link automatically set down -

Re: Why could heavy load will cause TCP packets out of order?

Re: Intermittent site issue from Office to AWS

Technical Tip: How to advertise a static route con...

Re: Firmware 7.2.8 issue - interface link automati...

Re: Why could heavy load will cause TCP packets ou...

Re: IPS in Fortigate Evaluation VM

Re: Test Demo Network

KCS