Description This article describes how to deal with the IKE negotiation
error between FortiGate and Sonicwall. Scope FortiOS v7. Solution CLI
commands: diagnose debug resetdiagnose vpn ike log filter cleardiagnose
vpn ike log filter name "IPsec_Tunne...
Description This article describes how to restrict the YouTube video
categories to 'Knowledge' exclusively. Scope FortiOS 7.4.2 and above.
Solution Starting FortiOS 7.4.2, there is an implicit 'allow' rule for
'any' video categories when creating a F...
Description This article describes how to configure Email Alert when
there is a configuration change on FortiGate. Scope FortiGate. Solution
Configure Email Server on FortiGate.Option 1: Using Alert Email. config
alertemail setting set username sende...
Description This article describes how to access the FortiGate console
when using a MacOS machine. Scope FortiGate, all firmware. Solution
Pre-requisite: Terminal App. Open the 'Terminal' App. Run the command ls
/dev/*usb*. From the output, choose th...
Description This article describes how to use DLP to block traffic from
messages that contain credit card information.In some cases, debit card
and credit card formats from other regions do not match the pre-defined
'credit-card' DLP Data Type.In thi...
Hi mudvayne16, Try to configure a source ip for the sdwan performance
sla and make sure that the source IP address is allowed on the IPsec
Phase2 selector. config system sdwanconfig health-check edit
<----- Health Check name. set source <----- sour...
Hi efernandes,Seems like the FortiAP is not getting the IP address from
FGT. Please ensure that the FortiGate is configured as DHCP server and
as a local NTP server on the actual physical interface that the FortiAP
is connected to.You may also refer ...
Hi brizio71,Yes it is possible because regular policy route takes
precedence over SDWAN rules.You may also refer to this link for the
route lookup
process:https://community.fortinet.com/t5/FortiGate/Technical-Tip-Routing-in-FortiGate-route-lookup-pro...
Hi tschacherl,Try to run the following commands to diagnose the
issue:execute switch-controller get-conn-status
Also, please make sure that fortilink is
enabled on the interface:config system interfaceedit set fortilink
enableendYou may also find thi...