Unlock Exclusive Benefits
Join Our Community Today!
Join our community and post in the forum to earn your exclusive Holiday badge! Become a member today!
LOGIN/REGISTER
CONTINUE AS A GUEST
- Support Forum
- Knowledge Base
- Customer Service
- Internal Article Nominations
- FortiGate
- FortiClient
- FortiAP
- FortiAnalyzer
- FortiADC
- FortiAuthenticator
- FortiBridge
- FortiCache
- FortiCarrier
- FortiCASB
- FortiConnect
- FortiConverter
- FortiCNP
- FortiDAST
- FortiDDoS
- FortiDB
- FortiDNS
- FortiDLP
- FortiDevSec
- FortiDeceptor
- FortiDirector
- FortiEDR
- FortiExtender
- FortiGate Cloud
- FortiHypervisor
- FortiGuard
- FortiInsight
- FortiIsolator
- FortiMail
- FortiMonitor
- FortiManager
- FortiNAC
- FortiNAC-F
- FortiNDR (on-premise)
- FortiNDRCloud
- FortiPAM
- FortiPhish
- FortiPortal
- FortiProxy
- FortiRecon
- FortiRecorder
- FortiSRA
- FortiSandbox
- FortiSASE
- FortiScan
- FortiSIEM
- FortiSOAR
- FortiSwitch
- FortiTester
- FortiToken
- FortiVoice
- FortiWAN
- FortiWeb
- FortiAppSec Cloud
- Lacework
- Wireless Controller
- RMA Information and Announcements
- FortiCloud Products
- ZTNA
- 4D Documents
- Customer Service
- Community Groups
- Blogs
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
- Fortinet Community
- Support Forum
- Re: ipsec phase 1 error
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ipsec phase 1 error
Hi,
I'm trying to setup a vpn s2s between a fortigate 101f and a fortigate vm on azure, the tunnel don't want to connect, everything is ok same paramteres, but doen't work, on the on prem i receive phase 1 error but on a tunnel that is N/A, and succes on the only tunnel i have and the one i want to function. What is the phase 1 error on the N/A tunnel?
2024/10/12 16:06:53
negotiateError
progress IPsec phase 1
failure
N/A
2024/10/12 16:06:53
negotiate
Notice
progress IPsec phase 1
success
AzureFGT
2024/10/12 16:06:48
negotiate
Azure FGT is the only tunnel I have
Labels:
- Labels:
-
SSL-VPN
Nominate a Forum Post for Knowledge Article Creation
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
4 REPLIES 4
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Please share the following:
diagnose debug application ike -1
diagnose debug console timestamp enable
diagnose debug enable
AEK
AEK
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
FortiHome # diagnose debug application ike -1
Debug messages will be on for 30 minutes.
FortiHome # diagnose debug console timestamp enable
FortiHome # diagnose debug enable
FortiHome # 2024-10-13 18:42:53.415179 ike V=root:0:AzureFGT:12332: auto transport timeout, use tcp port 4500
2024-10-13 18:42:53.415402 ike V=root:creates tcp-transport(vd=0, vrf=0, intf=46:46, x.x.x.x:24053->172.213.242.9:4500 sock=36 refcnt=2 ph1=0x55612070d0) (2).
2024-10-13 18:42:53.416948 ike V=root:0:AzureFGT:12332: create NAT-D hash local x.x.x.x/24053 remote 172.213.242.9/4500
2024-10-13 18:42:54.010698 ike V=root:error in tcp-transport(vd=0, vrf=0, intf=0:46, x.x.x.x:4500->y.y.y.y:2421 sock=35 refcnt=1 ph1=(nil))
2024-10-13 18:42:54.010819 ike V=root:deletes tcp-transport(vd=0, vrf=0, intf=0:46, x.x.x.x:4500->y.y.y.y:2421 sock=-1 refcnt=2 ph1=(nil)) (2).
2024-10-13 18:42:54.010861 ike V=root:destorys tcp-transport(vd=0, vrf=0, intf=0:46, x.x.x.x:4500->y.y.y.y:2421 sock=-1 refcnt=0 ph1=(nil)) (1).
2024-10-13 18:42:55.014625 ike V=root:0: comes y.y.y.y:500->x.x.x.x:500,ifindex=46,vrf=0,len=632....
2024-10-13 18:42:55.014730 ike V=root:0: IKEv2 exchange=SA_INIT id=a2ce63e352fc1b22/0000000000000000 len=632
2024-10-13 18:42:55.014779 ike 0: in A2CE63E352FC1B220000000000000000212022080000000000000278220000F002000034010100050300000C0100000C800E00800300000802000005030000080300000C0300000804000005000000080400000E02000034020100050300000C0100000C800E01000300000802000005030000080300000C0300000804000005000000080400000E0200002C030100040300000C01000014800E008003000008020000050300000804000005000000080400000E0200002C040100040300000C01000014800E010003000008020000060300000804000005000000080400000E0000002C050100040300000C0100001C800E010003000008020000050300000804000005000000080400000E28000108000E0000636A55225270EAD558FC976F9D7D1462A799364E83DAF5965B5BFE5559AF96B312D9B29C5DAD8829816BDA16B5361B3D2DF30128243D19DE58D79560AED6EF9935E00F83C6057067DCB9CD6A8500729B692729DB5832BB70583E6C47707773FB314CB6EDC73C58BDD3B516F67DCD667D7370013464354C95909EF902F45BB24A57FC9817581E9FC795A90FB0202350D291ED041EB31BC9B45FED7740E87AFA47A97A0CFE35ACD1FDCA1B9819AED780801E05DB0C94C8587D4EC33DD7A54663CEA409407BEFFFA67E4EC29E147A58859B65E076ED87C285E4A06EDE2EB6658EC6B970A49442B297511229D4119DB7F668D52C0C7EBD06A91D19A0C0A5BC6865BC29000024A5815338E7C8D6460F61014E48E429F3F5C8822D91CFD20BCA9EECBF5852B52D2900001C000040048ED2CCF05924CC7F7062C4C75B06854E94C72A1C2900001C00004005B8F77050DED7E25C9D41F00A6FB1183C8E2905D4000000080000402E
2024-10-13 18:42:55.014874 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: responder received SA_INIT msg
2024-10-13 18:42:55.014926 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: received notify type NAT_DETECTION_SOURCE_IP
2024-10-13 18:42:55.014972 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: received notify type NAT_DETECTION_DESTINATION_IP
2024-10-13 18:42:55.015013 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: received notify type FRAGMENTATION_SUPPORTED
2024-10-13 18:42:55.015069 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: incoming proposal:
2024-10-13 18:42:55.015111 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: proposal id = 1:
2024-10-13 18:42:55.015142 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: protocol = IKEv2:
2024-10-13 18:42:55.015203 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: encapsulation = IKEv2/none
2024-10-13 18:42:55.015243 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=ENCR, val=AES_CBC (key_len = 128)
2024-10-13 18:42:55.015281 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2024-10-13 18:42:55.015321 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:42:55.015359 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=DH_GROUP, val=MODP2048.
2024-10-13 18:42:55.015396 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=DH_GROUP, val=MODP1536.
2024-10-13 18:42:55.015443 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: proposal id = 2:
2024-10-13 18:42:55.015479 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: protocol = IKEv2:
2024-10-13 18:42:55.015514 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: encapsulation = IKEv2/none
2024-10-13 18:42:55.015551 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=ENCR, val=AES_CBC (key_len = 256)
2024-10-13 18:42:55.015588 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2024-10-13 18:42:55.015625 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:42:55.015660 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=DH_GROUP, val=MODP2048.
2024-10-13 18:42:55.015696 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=DH_GROUP, val=MODP1536.
2024-10-13 18:42:55.015742 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: proposal id = 3:
2024-10-13 18:42:55.015778 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: protocol = IKEv2:
2024-10-13 18:42:55.015824 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: encapsulation = IKEv2/none
2024-10-13 18:42:55.015858 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=ENCR, val=AES_GCM_16 (key_len = 128)
2024-10-13 18:42:55.015890 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:42:55.015922 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=DH_GROUP, val=MODP2048.
2024-10-13 18:42:55.015954 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=DH_GROUP, val=MODP1536.
2024-10-13 18:42:55.015995 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: proposal id = 4:
2024-10-13 18:42:55.016026 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: protocol = IKEv2:
2024-10-13 18:42:55.016058 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: encapsulation = IKEv2/none
2024-10-13 18:42:55.016091 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=ENCR, val=AES_GCM_16 (key_len = 256)
2024-10-13 18:42:55.016123 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=PRF, val=PRF_HMAC_SHA2_384
2024-10-13 18:42:55.016155 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=DH_GROUP, val=MODP2048.
2024-10-13 18:42:55.016186 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=DH_GROUP, val=MODP1536.
2024-10-13 18:42:55.016227 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: proposal id = 5:
2024-10-13 18:42:55.016259 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: protocol = IKEv2:
2024-10-13 18:42:55.016290 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: encapsulation = IKEv2/none
2024-10-13 18:42:55.016323 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=ENCR, val=CHACHA20_POLY1305 (key_len = 256)
2024-10-13 18:42:55.016355 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:42:55.016387 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=DH_GROUP, val=MODP2048.
2024-10-13 18:42:55.016418 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=DH_GROUP, val=MODP1536.
2024-10-13 18:42:55.016464 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: no proposal chosen
2024-10-13 18:42:55.016626 ike V=root:Negotiate SA Error: [12803]
2024-10-13 18:42:58.017814 ike V=root:0: comes y.y.y.y:500->x.x.x.x:500,ifindex=46,vrf=0,len=632....
2024-10-13 18:42:58.017895 ike V=root:0: IKEv2 exchange=SA_INIT id=a2ce63e352fc1b22/0000000000000000 len=632
2024-10-13 18:42:58.017941 ike 0: in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
2024-10-13 18:42:58.018053 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: responder received SA_INIT msg
2024-10-13 18:42:58.018099 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: received notify type NAT_DETECTION_SOURCE_IP
2024-10-13 18:42:58.018143 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: received notify type NAT_DETECTION_DESTINATION_IP
2024-10-13 18:42:58.018186 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: received notify type FRAGMENTATION_SUPPORTED
2024-10-13 18:42:58.018241 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: incoming proposal:
2024-10-13 18:42:58.018284 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: proposal id = 1:
2024-10-13 18:42:58.018317 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: protocol = IKEv2:
2024-10-13 18:42:58.018349 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: encapsulation = IKEv2/none
2024-10-13 18:42:58.018383 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=ENCR, val=AES_CBC (key_len = 128)
2024-10-13 18:42:58.018417 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2024-10-13 18:42:58.018450 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:42:58.018483 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=DH_GROUP, val=MODP2048.
2024-10-13 18:42:58.018515 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=DH_GROUP, val=MODP1536.
2024-10-13 18:42:58.018558 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: proposal id = 2:
2024-10-13 18:42:58.018590 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: protocol = IKEv2:
2024-10-13 18:42:58.018623 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: encapsulation = IKEv2/none
2024-10-13 18:42:58.018658 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=ENCR, val=AES_CBC (key_len = 256)
2024-10-13 18:42:58.018691 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2024-10-13 18:42:58.018723 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:42:58.018754 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=DH_GROUP, val=MODP2048.
2024-10-13 18:42:58.018786 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=DH_GROUP, val=MODP1536.
2024-10-13 18:42:58.018827 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: proposal id = 3:
2024-10-13 18:42:58.018858 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: protocol = IKEv2:
2024-10-13 18:42:58.018890 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: encapsulation = IKEv2/none
2024-10-13 18:42:58.018923 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=ENCR, val=AES_GCM_16 (key_len = 128)
2024-10-13 18:42:58.018955 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:42:58.018986 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=DH_GROUP, val=MODP2048.
2024-10-13 18:42:58.019020 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=DH_GROUP, val=MODP1536.
2024-10-13 18:42:58.019062 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: proposal id = 4:
2024-10-13 18:42:58.019094 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: protocol = IKEv2:
2024-10-13 18:42:58.019125 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: encapsulation = IKEv2/none
2024-10-13 18:42:58.019158 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=ENCR, val=AES_GCM_16 (key_len = 256)
2024-10-13 18:42:58.019191 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=PRF, val=PRF_HMAC_SHA2_384
2024-10-13 18:42:58.019223 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=DH_GROUP, val=MODP2048.
2024-10-13 18:42:58.019255 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=DH_GROUP, val=MODP1536.
2024-10-13 18:42:58.019295 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: proposal id = 5:
2024-10-13 18:42:58.019327 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: protocol = IKEv2:
2024-10-13 18:42:58.019359 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: encapsulation = IKEv2/none
2024-10-13 18:42:58.019395 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=ENCR, val=CHACHA20_POLY1305 (key_len = 256)
2024-10-13 18:42:58.019427 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:42:58.019460 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=DH_GROUP, val=MODP2048.
2024-10-13 18:42:58.019491 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=DH_GROUP, val=MODP1536.
2024-10-13 18:42:58.019536 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: no proposal chosen
2024-10-13 18:42:58.019628 ike V=root:Negotiate SA Error: [12803]
2024-10-13 18:43:03.435236 ike :shrank heap by 106496 bytes
2024-10-13 18:43:04.015921 ike V=root:0: comes y.y.y.y:500->x.x.x.x:500,ifindex=46,vrf=0,len=632....
2024-10-13 18:43:04.015992 ike V=root:0: IKEv2 exchange=SA_INIT id=a2ce63e352fc1b22/0000000000000000 len=632
2024-10-13 18:43:04.016035 ike 0: in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
2024-10-13 18:43:04.016150 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: responder received SA_INIT msg
2024-10-13 18:43:04.016196 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: received notify type NAT_DETECTION_SOURCE_IP
2024-10-13 18:43:04.016241 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: received notify type NAT_DETECTION_DESTINATION_IP
2024-10-13 18:43:04.016284 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: received notify type FRAGMENTATION_SUPPORTED
2024-10-13 18:43:04.016339 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: incoming proposal:
2024-10-13 18:43:04.016381 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: proposal id = 1:
2024-10-13 18:43:04.016414 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: protocol = IKEv2:
2024-10-13 18:43:04.016446 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: encapsulation = IKEv2/none
2024-10-13 18:43:04.016480 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=ENCR, val=AES_CBC (key_len = 128)
2024-10-13 18:43:04.016513 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2024-10-13 18:43:04.016546 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:04.016579 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:04.016611 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:04.016653 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: proposal id = 2:
2024-10-13 18:43:04.016684 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: protocol = IKEv2:
2024-10-13 18:43:04.016716 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: encapsulation = IKEv2/none
2024-10-13 18:43:04.016750 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=ENCR, val=AES_CBC (key_len = 256)
2024-10-13 18:43:04.016782 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2024-10-13 18:43:04.016814 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:04.016846 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:04.016878 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:04.016918 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: proposal id = 3:
2024-10-13 18:43:04.016950 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: protocol = IKEv2:
2024-10-13 18:43:04.016981 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: encapsulation = IKEv2/none
2024-10-13 18:43:04.017014 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=ENCR, val=AES_GCM_16 (key_len = 128)
2024-10-13 18:43:04.017046 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:04.017080 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:04.017112 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:04.017153 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: proposal id = 4:
2024-10-13 18:43:04.017185 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: protocol = IKEv2:
2024-10-13 18:43:04.017216 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: encapsulation = IKEv2/none
2024-10-13 18:43:04.017248 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=ENCR, val=AES_GCM_16 (key_len = 256)
2024-10-13 18:43:04.017281 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=PRF, val=PRF_HMAC_SHA2_384
2024-10-13 18:43:04.017312 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:04.017343 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:04.017384 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: proposal id = 5:
2024-10-13 18:43:04.017418 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: protocol = IKEv2:
2024-10-13 18:43:04.017452 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: encapsulation = IKEv2/none
2024-10-13 18:43:04.017485 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=ENCR, val=CHACHA20_POLY1305 (key_len = 256)
2024-10-13 18:43:04.017518 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:04.017550 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:04.017581 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:04.017627 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: no proposal chosen
2024-10-13 18:43:04.017707 ike V=root:Negotiate SA Error: [12803]
2024-10-13 18:43:08.445187 ike V=root:0:AzureFGT:12332: auto transport timeout, use tcp port 4500
2024-10-13 18:43:08.445253 ike V=root:0:AzureFGT:12332: auto transport tcp already up
2024-10-13 18:43:10.030828 ike V=root:accepts ike tcp-transport(vd=0, vrf=0, intf=0:46, x.x.x.x:4500->y.y.y.y:4087 sock=35 refcnt=2 ph1=(nil)) (2).
2024-10-13 18:43:13.012206 ike V=root:0: comes y.y.y.y:4087->x.x.x.x:4500,ifindex=46,vrf=0,len=632....
2024-10-13 18:43:13.012277 ike V=root:0: IKEv2 exchange=SA_INIT id=a2ce63e352fc1b22/0000000000000000 len=632
2024-10-13 18:43:13.012325 ike 0: in A2CE63E352FC1B220000000000000000212022080000000000000278220000F002000034010100050300000C0100000C800E00800300000802000005030000080300000C0300000804000005000000080400000E02000034020100050300000C0100000C800E01000300000802000005030000080300000C0300000804000005000000080400000E0200002C030100040300000C01000014800E008003000008020000050300000804000005000000080400000E0200002C040100040300000C01000014800E010003000008020000060300000804000005000000080400000E0000002C050100040300000C0100001C800E010003000008020000050300000804000005000000080400000E28000108000E0000D248B4A145134C0FF05E6DBB1B41745CCBA70AA3FA9776105C6DBBE37D913281D9AFCACC183CE005B4BD3542930B8DB218551D54A7FBE9F06AF9F02044F3096182BF73CFC7D9B132459B97060096039A1EAD6A127CA2D0CEB5036CF04F00D1C3E830BD7C6B25AD00D4E9CA8412BB4A6FF527C98E2C762CD621248D31F6B59461628829504D35CFE4F4826CE340F2D3121975974547FDBD001768506570138D48764F5563F15F3912553ACF7BEC4DF2C1AE94CA6D0AFA62EB856D5B1F0F016F964B9C9D58ACD23E1F7C16181376E05E390F50A575EF50AF05D2BBB1877130AFFDEC9E3C2E09AF0E1F2608E26841C0DDADD79FD86D5ED6579269A6CE88CC5F684529000024EB4616674F2D4CBDB1B687EF33B9D10874AF79B84C5A2FF2DD857BC2369BFE822900001C00004004C30E750B1E4F51AD2AF061AD616E22FDD49ABE802900001C00004005BA6C39E0D165EBA420FBD413F88B466B78F8872F000000080000402E
2024-10-13 18:43:13.012426 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336:sa bind new tcp-transport(vd=0, vrf=0, intf=0:46, x.x.x.x:4500->y.y.y.y:4087 sock=35 refcnt=1 ph1=(nil))
2024-10-13 18:43:13.012467 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: responder received SA_INIT msg
2024-10-13 18:43:13.012506 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: received notify type NAT_DETECTION_SOURCE_IP
2024-10-13 18:43:13.012543 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: received notify type NAT_DETECTION_DESTINATION_IP
2024-10-13 18:43:13.012579 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: received notify type FRAGMENTATION_SUPPORTED
2024-10-13 18:43:13.012629 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: incoming proposal:
2024-10-13 18:43:13.012665 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: proposal id = 1:
2024-10-13 18:43:13.012692 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: protocol = IKEv2:
2024-10-13 18:43:13.012718 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: encapsulation = IKEv2/none
2024-10-13 18:43:13.012746 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=ENCR, val=AES_CBC (key_len = 128)
2024-10-13 18:43:13.012772 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2024-10-13 18:43:13.012802 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:13.012829 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:13.012856 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:13.012892 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: proposal id = 2:
2024-10-13 18:43:13.012918 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: protocol = IKEv2:
2024-10-13 18:43:13.012943 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: encapsulation = IKEv2/none
2024-10-13 18:43:13.012971 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=ENCR, val=AES_CBC (key_len = 256)
2024-10-13 18:43:13.012997 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2024-10-13 18:43:13.013023 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:13.013049 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:13.013074 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:13.013109 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: proposal id = 3:
2024-10-13 18:43:13.013135 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: protocol = IKEv2:
2024-10-13 18:43:13.013160 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: encapsulation = IKEv2/none
2024-10-13 18:43:13.013188 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=ENCR, val=AES_GCM_16 (key_len = 128)
2024-10-13 18:43:13.013214 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:13.013240 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:13.013266 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:13.013301 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: proposal id = 4:
2024-10-13 18:43:13.013326 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: protocol = IKEv2:
2024-10-13 18:43:13.013352 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: encapsulation = IKEv2/none
2024-10-13 18:43:13.013378 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=ENCR, val=AES_GCM_16 (key_len = 256)
2024-10-13 18:43:13.013405 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=PRF, val=PRF_HMAC_SHA2_384
2024-10-13 18:43:13.013430 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:13.013456 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:13.013491 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: proposal id = 5:
2024-10-13 18:43:13.013517 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: protocol = IKEv2:
2024-10-13 18:43:13.013542 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: encapsulation = IKEv2/none
2024-10-13 18:43:13.013569 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=ENCR, val=CHACHA20_POLY1305 (key_len = 256)
2024-10-13 18:43:13.013595 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:13.013621 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:13.013647 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:13.013688 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: no proposal chosen
2024-10-13 18:43:13.013752 ike V=root:Negotiate SA Error: [12803]
2024-10-13 18:43:13.013836 ike V=root:destorys tcp-transport(vd=0, vrf=0, intf=46:46, x.x.x.x:4500->y.y.y.y:4087 sock=35 refcnt=0 ph1=(nil)) (1).
2024-10-13 18:43:13.053164 ike V=root:accepts ike tcp-transport(vd=0, vrf=0, intf=0:46, x.x.x.x:4500->y.y.y.y:5355 sock=35 refcnt=2 ph1=(nil)) (2).
2024-10-13 18:43:19.010534 ike V=root:0: comes y.y.y.y:5355->x.x.x.x:4500,ifindex=46,vrf=0,len=632....
2024-10-13 18:43:19.010607 ike V=root:0: IKEv2 exchange=SA_INIT id=a2ce63e352fc1b22/0000000000000000 len=632
2024-10-13 18:43:19.010655 ike 0: in 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
2024-10-13 18:43:19.010759 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337:sa bind new tcp-transport(vd=0, vrf=0, intf=0:46, x.x.x.x:4500->y.y.y.y:5355 sock=35 refcnt=1 ph1=(nil))
2024-10-13 18:43:19.010800 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: responder received SA_INIT msg
2024-10-13 18:43:19.010837 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: received notify type NAT_DETECTION_SOURCE_IP
2024-10-13 18:43:19.010874 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: received notify type NAT_DETECTION_DESTINATION_IP
2024-10-13 18:43:19.010910 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: received notify type FRAGMENTATION_SUPPORTED
2024-10-13 18:43:19.010959 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: incoming proposal:
2024-10-13 18:43:19.010995 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: proposal id = 1:
2024-10-13 18:43:19.011022 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: protocol = IKEv2:
2024-10-13 18:43:19.011048 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: encapsulation = IKEv2/none
2024-10-13 18:43:19.011076 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=ENCR, val=AES_CBC (key_len = 128)
2024-10-13 18:43:19.011103 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2024-10-13 18:43:19.011130 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:19.011157 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:19.011183 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:19.011218 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: proposal id = 2:
2024-10-13 18:43:19.011244 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: protocol = IKEv2:
2024-10-13 18:43:19.011270 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: encapsulation = IKEv2/none
2024-10-13 18:43:19.011297 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=ENCR, val=AES_CBC (key_len = 256)
2024-10-13 18:43:19.011322 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2024-10-13 18:43:19.011348 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:19.011374 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:19.011400 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:19.011435 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: proposal id = 3:
2024-10-13 18:43:19.011461 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: protocol = IKEv2:
2024-10-13 18:43:19.011487 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: encapsulation = IKEv2/none
2024-10-13 18:43:19.011513 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=ENCR, val=AES_GCM_16 (key_len = 128)
2024-10-13 18:43:19.011540 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:19.011566 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:19.011591 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:19.011626 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: proposal id = 4:
2024-10-13 18:43:19.011652 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: protocol = IKEv2:
2024-10-13 18:43:19.011686 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: encapsulation = IKEv2/none
2024-10-13 18:43:19.011714 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=ENCR, val=AES_GCM_16 (key_len = 256)
2024-10-13 18:43:19.011741 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=PRF, val=PRF_HMAC_SHA2_384
2024-10-13 18:43:19.011767 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:19.011793 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:19.011827 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: proposal id = 5:
2024-10-13 18:43:19.011853 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: protocol = IKEv2:
2024-10-13 18:43:19.011878 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: encapsulation = IKEv2/none
2024-10-13 18:43:19.011905 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=ENCR, val=CHACHA20_POLY1305 (key_len = 256)
2024-10-13 18:43:19.011931 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:19.011957 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:19.012001 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:19.012042 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: no proposal chosen
2024-10-13 18:43:19.012116 ike V=root:Negotiate SA Error: [12803]
2024-10-13 18:43:19.012198 ike V=root:destorys tcp-transport(vd=0, vrf=0, intf=46:46, x.x.x.x:4500->y.y.y.y:5355 sock=35 refcnt=0 ph1=(nil)) (1).
2024-10-13 18:43:19.045184 ike V=root:accepts ike tcp-transport(vd=0, vrf=0, intf=0:46, x.x.x.x:4500->y.y.y.y:10937 sock=35 refcnt=2 ph1=(nil)) (2).
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
IKE debug log is saying...
1. receiving 5 proposals
2. none of them is matching the local config.
"2024-10-13 18:42:55.016464 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: no proposal chosen"
Toshi
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi, you can view below kb for the link :https://docs.fortinet.com/document/fortigate/6.2.16/cookbook/255100/ipsec-vpn-to-azure-with-virtual-...
Security all we want
Announcements
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
Labels
-
FortiGate
8,736 -
FortiClient
1,774 -
5.2
801 -
FortiManager
734 -
5.4
639 -
FortiAnalyzer
562 -
FortiSwitch
476 -
FortiAP
473 -
FortiClient EMS
436 -
6.0
416 -
5.6
362 -
FortiMail
320 -
6.2
251 -
SSL-VPN
248 -
FortiAuthenticator v5.5
234 -
IPsec
211 -
FortiWeb
206 -
5.0
196 -
FortiNAC
190 -
FortiGuard
139 -
6.4
128 -
SD-WAN
117 -
FortiAuthenticator
105 -
FortiGateCloud
102 -
FortiSIEM
99 -
FortiCloud Products
97 -
FortiToken
92 -
Firewall policy
84 -
Customer Service
80 -
Wireless Controller
80 -
4.0MR3
64 -
FortiProxy
60 -
High Availability
56 -
FortiADC
54 -
Fortivoice
53 -
FortiEDR
52 -
vlan
52 -
ZTNA
49 -
Routing
47 -
FortiExtender
45 -
FortiSandbox
44 -
DNS
44 -
FortiDNS
42 -
LDAP
42 -
BGP
40 -
Authentication
39 -
FortiGate v5.4
35 -
SAML
35 -
NAT
35 -
Certificate
35 -
FortiSwitch v6.4
34 -
RADIUS
34 -
SSO
33 -
Interface
31 -
FortiConnect
30 -
VDOM
30 -
FortiLink
29 -
FortiWAN
27 -
Application control
27 -
Web profile
27 -
FortiConverter
25 -
Logging
25 -
Virtual IP
25 -
FortiGate v5.2
24 -
SSL SSH inspection
23 -
FortiPAM
22 -
Fortigate Cloud
20 -
FortiSwitch v6.2
19 -
FortiPortal
19 -
FortiGate-VM
18 -
FortiMonitor
18 -
Traffic shaping
17 -
SSID
16 -
WAN optimization
16 -
FortiDDoS
15 -
OSPF
15 -
Automation
15 -
FortiGate v5.0
14 -
FortiSoar
14 -
Static route
14 -
System settings
14 -
Web application firewall profile
14 -
IP address management - IPAM
14 -
SNMP
13 -
FortiCASB
12 -
Admin
12 -
FortiManager v5.0
11 -
FortiRecorder
11 -
Security profile
11 -
Proxy policy
11 -
FortiManager v4.0
10 -
FortiBridge
10 -
IPS signature
10 -
FortiAP profile
10 -
4.0MR2
9 -
FortiGate v4.0 MR3
9 -
FortiWeb v5.0
9 -
Traffic shaping policy
9 -
Intrusion prevention
9 -
FortiDeceptor
8 -
RMA Information and Announcements
8 -
Port policy
8 -
4.0
7 -
FortiAnalyzer v5.0
7 -
FortiCache
7 -
DNS filter
7 -
Antivirus profile
7 -
Fabric connector
7 -
Web rating
7 -
Fortinet Engage Partner Program
7 -
FortiToken Cloud
6 -
Explicit proxy
6 -
trunk
6 -
Packet capture
6 -
Traffic shaping profile
6 -
API
5 -
FortiTester
5 -
Users
5 -
Email filter profile
5 -
3.6
4 -
FortiCarrier
4 -
FortiScan
4 -
FortiDirector
4 -
Internet service database
4 -
Application signature
4 -
Authentication rule and scheme
4 -
DLP sensor
4 -
Netflow
4 -
Replacement messages
4 -
Cloud Management Security
4 -
FortiDB
3 -
FortiHypervisor
3 -
FortiNDR
3 -
NAC policy
3 -
DLP Dictionary
3 -
DLP profile
3 -
DoS policy
3 -
Protocol option
3 -
TACACS
3 -
SDN connector
3 -
Service
3 -
VoIP profile
3 -
Multicast routing
3 -
FortiInsight
2 -
FortiAI
2 -
Kerberos
2 -
Schedule
2 -
Multicast policy
2 -
Zone
2 -
Vulnerability Management
2 -
4.0MR1
1 -
FortiManager-VM
1 -
FortiCWP
1 -
Subscription Renewal Policy
1 -
Video Filter
1 -
ICAP profile
1
Top Kudoed Authors
| User | Count |
|---|---|
| 1732 | |
| 1105 | |
| 752 | |
| 447 | |
| 240 |
Broad. Integrated. Automated.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Security Research
Company
News & Articles
Copyright 2024 Fortinet, Inc. All Rights Reserved.