Description This article describes how the missing parameter 'set
local-gw' under the phase1 interface can trigger issues between two
IPsec endpoints. Command 'set local-gw A.B.C.D' defines the source
address used for self-originated outbound IKE pac...
Description In case it is required to block ICMP Unreachable messages
(Type3) due to security reasons (e.g. preventing BlackNurse attack)
FortiGate administrator can use interface-policy to block ICMP type 3
messages. This article describes how to co...