Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Oberon
New Contributor

FGT 110C - Websites don' t show up

hi folks I' ve got some problem to access certain websites with a Fortigate 110C - v4.0,build0303,101214 (MR2 Patch 3) The following Websites can' t get loaded by the first access. With one or two refreshes they show up. http://www.angst-pfister.com http://www.blechform.ch http://www.meteoschweiz.admin.ch http://www.maagtechnic.ch This problem just came up after I changed from a 200A (v4MR1) to the 110C box. I all ready disabled all security profile settings, put all this websites i a exempt Website list, testet with two different ISP' s and tried with Firefox and IE8. Any Idea where this comes from? Is it might a MR2 bug? Thanks for help and ideas! kr Ralph
Private Use: Fortigate-50B, 4.00-MR3, NAT/IPsec-VPN/SSL-VPN
Private Use: Fortigate-50B, 4.00-MR3, NAT/IPsec-VPN/SSL-VPN
9 REPLIES 9
rwpatterson
Valued Contributor III

Have you tried backing the 110C to the prior working firmware level?

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Bob - self proclaimed posting junkie!See my Fortigate related scripts at: http://fortigate.camerabob.com
Oberon
New Contributor

thanks for your input. I installed this firmware with tftp. I wanted a clear system to start with V4MR2. So there is no secondary firmware (check attachement).
Private Use: Fortigate-50B, 4.00-MR3, NAT/IPsec-VPN/SSL-VPN
Private Use: Fortigate-50B, 4.00-MR3, NAT/IPsec-VPN/SSL-VPN
rwpatterson
Valued Contributor III

Did you build the new config from scratch or restore from the 200A?

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

Bob - self proclaimed posting junkie!See my Fortigate related scripts at: http://fortigate.camerabob.com
Toni_Sulosalmi
New Contributor

Most probably you are using IPS on the policy? There is a bug in 4.2.3 with IPS.
Matthijs
New Contributor II

Do you have any more information about that " IPS" bug? What is the problem and is there a workaround?
Oberon
New Contributor

thanks for the help! The configuraiton is hand made, no restore of any content. I also think it is the IPS. I tested on different boxes and dissabled the UTM (IPS) in the wrong policy. So I thought it got nothing to do with UTM. Sorry for that! First tests looked good or at least better, but I wait now for some response from the users. As fare I know there is no workaround for this build - exempt to disable IPS and to wait until MR3 is out, which should come in March. Or role back.
Private Use: Fortigate-50B, 4.00-MR3, NAT/IPsec-VPN/SSL-VPN
Private Use: Fortigate-50B, 4.00-MR3, NAT/IPsec-VPN/SSL-VPN
Toni_Sulosalmi

There will be a new patch 4.2.4 coming soon (within 1 week) which should resolve website issue.
Toni_Sulosalmi

And 4.2.4 is out now. Seems to resolve web page issues.
Not applicable

I don' t know about an IPS bug, but I have found websites that behave this way as well. I believe that I may have resolved the issue by disabling the Application filter. I' m still using the Antivirus, IPS, Webfiltering, etc. Just removed the Application filter and this seems to have resolved my issue. I too am running version 4.00 build 0303, but I' m running it on FGT-60Cs and FWF-60Cs. Anyone else seeing this? Anyone know if it is a bug and if it is being worked on? Thanks, Mike
Top Kudoed Authors