Is there any way to get a pcap/packet capture from a fortigate for a policy based ipsec vpn or vpn concentrator?
Without being able to select an interface in the diagnostic menu it appears that there is no way to get a pcap off of the system.
Dear @aguerriero,
You can refer below document for the policy based packet capture.
Troubleshooting Tip: Using the FortiOS policy base... - Fortinet Community
BR
Works great if the fortigate model has internal storage. Packet capture on a policy doesn't exist on an 1100E.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.