Technical Tip: Collect IKE Debug Logs for IPsec VPN Directly from the GUI

In environments where multiple IPsec tunnels are configured, managing diagnostics through the CLI can be complex. The FortiGate GUI provides a simplified and more efficient method for collecting IKE debug logs.

Steps to collect IKE debug from the GUI:

1. Log in to the FortiGate GUI.
   
2. Navigate to VPN -> IPsec Tunnels.
   
3. Locate the specific IPsec tunnel that requires debugging.
   
4. 'Right-click' the tunnel and select CLI Diagnostics.

5. In the opened diagnostics window, IKE Debug will run for the selected ipsec tunnel.

6. Start the debug process and reproduce the issue or initiate the tunnel connection.
7. Once the debug session is complete, stop the debug 'diagnose debug reset' to avoid unnecessary log generation.
8. The collected debug output can be reviewed directly in the GUI or exported for further analysis.