diagnose debug application sslvpn -1

[julianhaines]

Hi,

I am trying to debug the SSL VPN using the commands below but they only last 30 minutes, is there a way of making debug last longer or turn on at a certain point?

 diagnose debug application sslvpn -1

[sw2090]

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Changing-debug-duration/ta-p/191069

its a bit older so not sure if that still works in current FortiOSes.

[spoojary]

Yes I tried and it still works fine. 

[kumarh]

You can refer to the following commands:
# diagnose debug application fnbamd 255
#diagnose debug duration 0 ----------------------> For unlimited duration (You can also change to specific time. Instead of 0 add any digits that will count as minute)
# diagnose debug application sslvpn -1
# diagnose debug console timestamp enable
# diagnose debug enable

[Toshi_Esumi]

Also combine below if you have too many users and want to see only one user's log.

# diag vpn ssl debug-filter src-addr4 <user_public_ip>

Toshi

[jiyong]

If you checked something trigger, I think utilizing automation would also be useful. (like eventlog or memory)

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-run-auto-script-and-send-the-output...