Description This article describes how to understand and troubleshoot
'Invalid ESP packet detected (replayed packet)' error. Scope FortiOS.
Solution The Error:Invalid ESP packet detected (replayed
packet).Reason:A sequence number that monotonically i...
Description This article describes how to retrieve the application list
from the FortiGate CLI. Scope FortiGate. Solution Login into the
FortiGate CLI and execute the following command: get application name
status Sample output: The output will conta...
Description This article describes how to resolve the error 'ike
Negotiate SA Error: ike ike [1470]' which occurs due to a network-id
mismatch in configuration. Scope Any supported version of FortiGate.
Solution This article assumes conditions where ...
Description This article describes how to allow SSL VPN users to access
remote resources over an existing site-to-site IPsec VPN tunnel. Scope
FortiGate. Solution Network Topology: SSL VPN user connects to FortiGate
A and needs access to resources be...
refer the article to FortiGate HA upgrade procedure and the status
during the upgrade.:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-HA-upgrade-procedure-and-the-status/ta-p/246692
Traffic shaper policy are matched from top-down, so the traffic shaping
policies should be arranged in a sequence that places the more granular
policies above general policies. Verify the actual usage of the shaper
policy in the 'Traffic Shapers' men...
You can block download from DLP. you can specify all file extension
(i.e. .exe, .rar).
https://community.fortinet.com/t5/FortiGate/Technical-Tip-DLP-Configuration-to-Block-by-file-type-and/ta-p/218034
Can you share ospf configuration. refer :
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Announcing-SSL-VPN-address-range-into-OSPF/ta-p/239418