FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Adam_Shortt_FTNT
Article Id 357812
Description This article describes items that are outside the scope of TAC.
Scope FortiGate.
Solution

Fortinet's Technical Assistance Center (TAC) is always ready and willing to assist users in need. However, some tasks are considered routine administrative duties and should first be attempted by a qualified administrator before engaging TAC as often these issues can be resolved faster using available documentation.

 

It is important to note the below activities may require TAC support after initial actions are performed by the firewall administrator. Routine administrative duties that an administrator should be able to perform unassisted initially:

 

  1. New deployments, as well as network design requests. Administrators must attempt to set up the feature/environment first beforehand.
    • Note: TAC does not design/implement new network topologies on behalf of clients (i.e. they are a 'break/fix' oriented team that resolves individual issues within existing environments).
    • If more in-depth technical consulting services are required (i.e. having a designated engineer assigned to design/deploy/optimize new network topologies), then consider engaging the services of the Fortinet Professional Services team (see also: FortiCare Professional Services).
  2. Firmware upgrades: Upgrade path, release notes (v7.6, v7.4, v7.2), upgrade instructions, HA cluster upgrade instructions.

  3. Hardware validation using HQIP commands

  4. Conserve mode: prevention, diagnostics.
  5. HA checksum troubleshooting

  6. HA cluster formation/rebuilding

  7. Initial FortiGate configuration

  8. Whitelist/bypass policy to exempt select hosts from scanning.

  9. Basic connectivity troubleshooting.

  10. Basic SSL VPN troubleshooting.

  11. Basic IPsec VPN troubleshooting.

  12. Basic authentication troubleshooting LDAP, RADIUS, SAML.

  13. Basic DHCP troubleshooting.

  14. Basic DNS troubleshooting.

  15. FortiGuard troubleshooting: ConnectivityDNS rating errors, Web filter issues.

  16. Basic routing troubleshooting.

  17. Basic throughput troubleshooting.

  18. Basic logging troubleshooting.

  19. Console access for continual monitoring.

  20. Restricting system access to appropriate parties: SSL VPN options, Trusted hosts and local in policies.

  21. Programming-related configuration scope (API, Regex, signatures, HTML, scripting, reports).

  22. Standby support requests (unless an issue has been previously encountered). Higher levels of support can cover this need.

  23. Performance evaluation on CPU or memory after enabling security features, unless it is high CPU: Technical Tip: Debugs for troubleshooting high CPU Issues) or high memory(Troubleshooting Tip: How to do initial troubleshooting of high memory utilization issues (conserve m...troubleshoot.

  24. Configuration Migration. Customers must either use the FortiConverter tool or seek professional services.

A CLI cheat sheet reference for diagnostics can be used to gather details before engaging TAC.

 

Related article:

Technical Tip: Technical Support on customization

Technical Tip: Fortinet Support: FortiCare Service Level Agreements and FortiCare Case Priority

Technical Tip: How to enhance experience with TAC representative