New Member

Solved

Can "diagnose debug application" Be Filtered

Forum|Forum|1 year ago
February 6, 2025
4 replies
1848 views

I am trying to debug some ssl-vpn connection stuff. If I run "diag debug application sslvpn -1" it generates a lot of debug lines. Downloading the output and filtering through it to find what I need is not fun.

Is there a way to filter this by the source IP of the remote VPN client? Or by some sort of VPN session ID? Or something so that I can focus on troubleshooting a single user without having to wade through all the other connection data?

FortiGate

Best answer by Dhruvin_patel

Greetings!

Yes there is a way to filter with public IP source address.

diagnose vpn ssl debug-filter src-addr4 x.x.x.x -------> public IP of the endpoint
diagnose debug application sslvpn -1
diagnose debug enable

If you wish to clear the filter, use this command, diagnose vpn ssl debug-filter clear

ref: https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-SSL-VPN-Troubleshooting/ta-p/189542

Regards!

Dhruvin_patelAnswer

Staff

Greetings!

Yes there is a way to filter with public IP source address.

diagnose vpn ssl debug-filter src-addr4 x.x.x.x -------> public IP of the endpoint
diagnose debug application sslvpn -1
diagnose debug enable

If you wish to clear the filter, use this command, diagnose vpn ssl debug-filter clear

ref: https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-SSL-VPN-Troubleshooting/ta-p/189542

Regards!

RRatBBAuthor

New Member

Perfect! Thank you.

SuperUser

Yes you can with this command.

diagnose vpn ssl debug-filter ...

Full info here:

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-SSL-VPN-Troubleshooting/ta-p/189542

Hope it helps.

AEK

RRatBBAuthor

New Member

Thanks!

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.

Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.

Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT