Technical Tip: Collect IKE Debug Logs for IPsec VPN Directly from the GUI

[mpandya]

Description	This article describes the process of collecting IKE debug logs using the FortiGate GUI.
Skope	FortiGate v7.6.3 and later.
Solution	In environments where multiple IPsec tunnels are configured, managing diagnostics through the CLI can be complex. The FortiGate GUI provides a simplified and more efficient method for collecting IKE debug logs. Steps to collect IKE debug from the GUI: Log in to the FortiGate GUI. Navigate to VPN -> IPsec Tunnels. Locate the specific IPsec tunnel that requires debugging. 'Right-click' the tunnel and select CLI Diagnostics.   In the opened diagnostics window, select IKE Debug from the available options. Start the debug process and reproduce the issue or initiate the tunnel connection. Once the debug session is complete, stop the debug 'diagnose deb reset' to avoid unnecessary log generation. The collected debug output can be reviewed directly in the GUI or exported for further analysis.