Technical Tip: Best practices while deploying Fort...

sthampi_FTNT · 08-07-2023

Description In certain cases, high CPU usage is observed in the System Space of a customer Fortigate. This article provides the commands to collect data output from duringa time of high CPU usage for debugging purposes. Scope FortiGate Solution CPU P...

sthampi_FTNT · 08-07-2023

Description This article describes 'Heartbeat packet lost' errors in HA log messages and offers ways to identify the root cause and fix it. Scope FortiGate running in HA mode (FGCP HA Active-Passive or Active-Active). Solution When a FortiGate is run...

sthampi_FTNT · 07-24-2023

Description This article describes why the route cache is removed from FortiGates running the latest kernel version. A workaround is provided. Scope FortiGates running on Kernel Version 4.19 and above. Solution Route cache is a linux kernel component...

sthampi_FTNT · 06-09-2023

Description This article provides configuration and verification steps to optimize an NP7-based FortiGate. Scope FortiGate with Network Processor 7. Solution While deploying FortiGate which uses NP7, it is important to verify that the default queues ...

sthampi_FTNT · 11-28-2022

Description This article provides configuration and verification steps to maintain an FGSP high availability cluster of SecureGateways. Scope FortiGate v7.2.3 GA. Solution Important Notes: In the diagram, FGT A and FGT B are geographically located at...

sthampi_FTNT · 10-03-2023

Hello NotMine, Usually mgmt interface is used for dedicated Out of Band Management of the device. However, if you like to use it as a backup heartbeat interface for HA, there is no harm in doing that. you may go ahead and configure it and it will wor...

sthampi_FTNT · 07-28-2023

Hi Mmat, It is currently not possible to send an alert email for a 'specific category or users' using Automation stitch on the Fortigate. However, this can be achieved by using a FortiAnalyzer event handler, by following the steps mentioned in the pr...

sthampi_FTNT · 07-28-2023

Hi Ble, The log shown in the attachment is generated by the Fortigate and sent to the Fortianalyser. The direction mentioned in the log is determined by the Fortigate and it is determined as per the explanation given in the following article. https:/...

sthampi_FTNT · 07-27-2023

Hello, It seems to be an old post however replying for the benefit of everyone.While migrating from 600C to 600E, there a few things to consider, 1. Does it have the same configuration on both the devices, capwap/fabric enabled on the interface? 2. F...

sthampi_FTNT · 07-27-2023

Hi Mmat, Yes, this can be achieved by using Automation stitches in a Fortigate, action=send an email, trigger=webfilter violation. Following articles explain the same: https://docs.fortinet.com/document/fortigate/6.2.15/cookbook/526019/email-alerts h...

User Statistics

User Activity

Troubleshooting Tip: Troubleshoot high CPU usage in System Space

Troubleshooting Tip: How to troubleshoot HA 'Heartbeat packet lost' issues in a FortiGate HA Cluster

Troubleshooting Tip: Route cache is removed from FortiGates running new kernel version

Technical Tip: Best practices while deploying FortiGate models with NP7 Chip

Technical Tip: Configuring and verifying FGSP with an IPsec tunnel and session synchronization

Re: MGMT interface for HA Hartbeat

Re: Web Filter Alerts

Re: FortiAnalyzer: Threat direction

Re: Wireless AP change to new device

Re: Web Filter Alerts

Technical Tip: Best practices while deploying Fort...

Troubleshooting Tip: Route cache is removed from F...

Technical Tip: Configuring and verifying FGSP with...

Troubleshooting Tip: Troubleshoot high CPU usage i...

Troubleshooting Tip: How to troubleshoot HA 'Heart...

Re: MGMT interface for HA Hartbeat

Re: Web Filter Alerts

Re: FortiAnalyzer: Threat direction

Re: Two firewall policy, one working one is not wo...

Re: How can I change the name of the "Combined Def...

KCS

Fortinet Training Institute