DescriptionThis article describes some known-limitations regarding the types of IP Pools that can be combined with ZTNA policies (both Simple and Full policies).ScopeFortiGate, ZTNA.Solution As a quick primer, user conne...

DescriptionThis article describes how to troubleshoot when some ZTNA Clients are denied by FortiGate with the message 'ZTNA tag verification failed – access denied'.ScopeFortiGate, FortiClient, and FortiClient EMS.Soluti...

Description This article describes the effect of the 'Default Certificate' option in the 'ZTNA Server' configuration on traffic. This article assumes familiarity with ZTNA configuration. The following link provides a ref...

DescriptionThis article how to troubleshoot the error 'Can not set port ranges over 16' when editing mappedport on Access proxy setting.ScopeFortiGate.Solution When trying to edit the mappedport on the current setting of...

DescriptionThis article describes the behavior by design for allowed existing sessions after the ZTNA tag is removed on FortiGate and how to block the traffic once the ZTNA tag has been removed.ScopeFortiGate v7.2.0 and ...

DescriptionThis article describes what are the downsides of using SSL VPN web mode compared to tunnel mode.ScopeFortiGate v6.4.X, v7.0.X, v7.2.X, v7.4.X.Solution Some years ago most of the web pages were using static HTM...

DescriptionThis article describes the feature of being able to use the SD-WAN interface (virtual wan link) as the source interface for the ZTNA Authentication Rule.ScopeFortiOS 7.4.1+, 7.6.0+Solution Authentication Rule ...

Description   This article explains different redirection scenarios in a server environment, focusing on the use of absolute and relative URLs. When protecting or migrating a server behind a FortiGate using a VIP, virtua...