Description This article covers a specific scenario where, due to a PFS
mismatch, an IKEv2 tunnel will result in a tunnel flap at each IPSec
rekey even though it comes up initially. Scope FortiGate, IPSec tunnel,
IKEv2, PFS. Solution In contrast to I...
Description This article addresses how to disable AES CBC ciphers for
SSL VPN and Admin GUI Access (HTTPS). Scope FortiGate, SSL VPN, HTTPS,
GUI, CBC (Cipher-Block-Chaining). Solution As vulnerability scanners are
starting to report AES CBC ciphers a...