Skip to main content
Patterson
Staff
Staff
November 20, 2025

Technical Tip: How to perform packet capture from FortiSASE Portal

  • November 20, 2025
  • 0 replies
  • 306 views
Description

 

This article describes how to perform packet capture from the FortiSASE portal.

 

Scope

 

FortiSASE.

 

Solution

 

For the Feature version of FortiSASE:

 

Option 1:

Navigate to 'Operations' and select 'Connected user'.

'Right-click' on the user for whom the packet needs to be taken.

 

packetcapture-1.png

 

Here, options will be available to select the security pop, Watch (VPN, Proxy, Thin Edge Device), and filter options to define the match criteria.

 

packetcapture-2.png

 

Option 2:

Navigate to 'Endpoint Management' and select the user of choice.

 

pcap-1.png

 

Then go to the packet capture tab:

 

pcap-2.png

 

Once applied to start capture, Real-time capture will be performed and displayed with the option to save or Restart Capture.


packetcapture-3.png

 

Related document:

Packet capture