Unlock Exclusive Benefits
Join Our Community Today!
Join our community and post in the forum to earn your exclusive Autumn 2024 badge! Become a member today!
LOGIN/REGISTER
CONTINUE AS A GUEST
- Forums
- Knowledge Base
- Customer Service
- Internal Article Nominations
- FortiGate
- FortiClient
- FortiAP
- FortiAnalyzer
- FortiADC
- FortiBridge
- FortiAuthenticator
- FortiCache
- FortiCarrier
- FortiConnect
- FortiCASB
- FortiConverter
- FortiCNP
- FortiDAST
- FortiDB
- FortiDDoS
- FortiDNS
- FortiDeceptor
- FortiDevSec
- FortiDirector
- FortiEDR
- FortiExtender
- FortiGate Cloud
- FortiHypervisor
- FortiGuard
- FortiInsight
- FortiIsolator
- FortiMail
- FortiMonitor
- FortiManager
- FortiNAC
- FortiNAC-F
- FortiNDR (on-premise)
- FortiNDRCloud
- FortiPAM
- FortiPhish
- FortiPortal
- FortiProxy
- FortiRecorder
- FortiRecon
- FortiSandbox
- FortiScan
- FortiSASE
- FortiSIEM
- FortiSOAR
- FortiSwitch
- FortiTester
- FortiToken
- FortiWAN
- FortiVoice
- FortiWeb
- FortiWebCloud
- Lacework
- RMA Information and Announcements
- Wireless Controller
- FortiCloud Products
- ZTNA
- 4D Documents
- Customer Service
- Community Groups
- Blogs
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
- Fortinet Community
- Forums
- Support Forum
- ipsec phase 1 error
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
ipsec phase 1 error
Hi,
I'm trying to setup a vpn s2s between a fortigate 101f and a fortigate vm on azure, the tunnel don't want to connect, everything is ok same paramteres, but doen't work, on the on prem i receive phase 1 error but on a tunnel that is N/A, and succes on the only tunnel i have and the one i want to function. What is the phase 1 error on the N/A tunnel?
2024/10/12 16:06:53
negotiateError
progress IPsec phase 1
failure
N/A
2024/10/12 16:06:53
negotiate
Notice
progress IPsec phase 1
success
AzureFGT
2024/10/12 16:06:48
negotiate
Azure FGT is the only tunnel I have
Labels:
- Labels:
-
SSL-VPN
Nominate a Forum Post for Knowledge Article Creation
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
4 REPLIES 4
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Please share the following:
diagnose debug application ike -1
diagnose debug console timestamp enable
diagnose debug enable
AEK
AEK
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
FortiHome # diagnose debug application ike -1
Debug messages will be on for 30 minutes.
FortiHome # diagnose debug console timestamp enable
FortiHome # diagnose debug enable
FortiHome # 2024-10-13 18:42:53.415179 ike V=root:0:AzureFGT:12332: auto transport timeout, use tcp port 4500
2024-10-13 18:42:53.415402 ike V=root:creates tcp-transport(vd=0, vrf=0, intf=46:46, x.x.x.x:24053->172.213.242.9:4500 sock=36 refcnt=2 ph1=0x55612070d0) (2).
2024-10-13 18:42:53.416948 ike V=root:0:AzureFGT:12332: create NAT-D hash local x.x.x.x/24053 remote 172.213.242.9/4500
2024-10-13 18:42:54.010698 ike V=root:error in tcp-transport(vd=0, vrf=0, intf=0:46, x.x.x.x:4500->y.y.y.y:2421 sock=35 refcnt=1 ph1=(nil))
2024-10-13 18:42:54.010819 ike V=root:deletes tcp-transport(vd=0, vrf=0, intf=0:46, x.x.x.x:4500->y.y.y.y:2421 sock=-1 refcnt=2 ph1=(nil)) (2).
2024-10-13 18:42:54.010861 ike V=root:destorys tcp-transport(vd=0, vrf=0, intf=0:46, x.x.x.x:4500->y.y.y.y:2421 sock=-1 refcnt=0 ph1=(nil)) (1).
2024-10-13 18:42:55.014625 ike V=root:0: comes y.y.y.y:500->x.x.x.x:500,ifindex=46,vrf=0,len=632....
2024-10-13 18:42:55.014730 ike V=root:0: IKEv2 exchange=SA_INIT id=a2ce63e352fc1b22/0000000000000000 len=632
2024-10-13 18:42:55.014779 ike 0: in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
2024-10-13 18:42:55.014874 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: responder received SA_INIT msg
2024-10-13 18:42:55.014926 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: received notify type NAT_DETECTION_SOURCE_IP
2024-10-13 18:42:55.014972 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: received notify type NAT_DETECTION_DESTINATION_IP
2024-10-13 18:42:55.015013 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: received notify type FRAGMENTATION_SUPPORTED
2024-10-13 18:42:55.015069 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: incoming proposal:
2024-10-13 18:42:55.015111 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: proposal id = 1:
2024-10-13 18:42:55.015142 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: protocol = IKEv2:
2024-10-13 18:42:55.015203 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: encapsulation = IKEv2/none
2024-10-13 18:42:55.015243 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=ENCR, val=AES_CBC (key_len = 128)
2024-10-13 18:42:55.015281 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2024-10-13 18:42:55.015321 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:42:55.015359 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=DH_GROUP, val=MODP2048.
2024-10-13 18:42:55.015396 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=DH_GROUP, val=MODP1536.
2024-10-13 18:42:55.015443 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: proposal id = 2:
2024-10-13 18:42:55.015479 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: protocol = IKEv2:
2024-10-13 18:42:55.015514 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: encapsulation = IKEv2/none
2024-10-13 18:42:55.015551 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=ENCR, val=AES_CBC (key_len = 256)
2024-10-13 18:42:55.015588 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2024-10-13 18:42:55.015625 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:42:55.015660 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=DH_GROUP, val=MODP2048.
2024-10-13 18:42:55.015696 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=DH_GROUP, val=MODP1536.
2024-10-13 18:42:55.015742 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: proposal id = 3:
2024-10-13 18:42:55.015778 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: protocol = IKEv2:
2024-10-13 18:42:55.015824 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: encapsulation = IKEv2/none
2024-10-13 18:42:55.015858 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=ENCR, val=AES_GCM_16 (key_len = 128)
2024-10-13 18:42:55.015890 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:42:55.015922 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=DH_GROUP, val=MODP2048.
2024-10-13 18:42:55.015954 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=DH_GROUP, val=MODP1536.
2024-10-13 18:42:55.015995 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: proposal id = 4:
2024-10-13 18:42:55.016026 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: protocol = IKEv2:
2024-10-13 18:42:55.016058 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: encapsulation = IKEv2/none
2024-10-13 18:42:55.016091 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=ENCR, val=AES_GCM_16 (key_len = 256)
2024-10-13 18:42:55.016123 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=PRF, val=PRF_HMAC_SHA2_384
2024-10-13 18:42:55.016155 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=DH_GROUP, val=MODP2048.
2024-10-13 18:42:55.016186 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=DH_GROUP, val=MODP1536.
2024-10-13 18:42:55.016227 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: proposal id = 5:
2024-10-13 18:42:55.016259 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: protocol = IKEv2:
2024-10-13 18:42:55.016290 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: encapsulation = IKEv2/none
2024-10-13 18:42:55.016323 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=ENCR, val=CHACHA20_POLY1305 (key_len = 256)
2024-10-13 18:42:55.016355 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:42:55.016387 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=DH_GROUP, val=MODP2048.
2024-10-13 18:42:55.016418 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: type=DH_GROUP, val=MODP1536.
2024-10-13 18:42:55.016464 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: no proposal chosen
2024-10-13 18:42:55.016626 ike V=root:Negotiate SA Error: [12803]
2024-10-13 18:42:58.017814 ike V=root:0: comes y.y.y.y:500->x.x.x.x:500,ifindex=46,vrf=0,len=632....
2024-10-13 18:42:58.017895 ike V=root:0: IKEv2 exchange=SA_INIT id=a2ce63e352fc1b22/0000000000000000 len=632
2024-10-13 18:42:58.017941 ike 0: in A2CE63E352FC1B220000000000000000212022080000000000000278220000F002000034010100050300000C0100000C800E00800300000802000005030000080300000C0300000804000005000000080400000E02000034020100050300000C0100000C800E01000300000802000005030000080300000C0300000804000005000000080400000E0200002C030100040300000C01000014800E008003000008020000050300000804000005000000080400000E0200002C040100040300000C01000014800E010003000008020000060300000804000005000000080400000E0000002C050100040300000C0100001C800E010003000008020000050300000804000005000000080400000E28000108000E0000636A55225270EAD558FC976F9D7D1462A799364E83DAF5965B5BFE5559AF96B312D9B29C5DAD8829816BDA16B5361B3D2DF30128243D19DE58D79560AED6EF9935E00F83C6057067DCB9CD6A8500729B692729DB5832BB70583E6C47707773FB314CB6EDC73C58BDD3B516F67DCD667D7370013464354C95909EF902F45BB24A57FC9817581E9FC795A90FB0202350D291ED041EB31BC9B45FED7740E87AFA47A97A0CFE35ACD1FDCA1B9819AED780801E05DB0C94C8587D4EC33DD7A54663CEA409407BEFFFA67E4EC29E147A58859B65E076ED87C285E4A06EDE2EB6658EC6B970A49442B297511229D4119DB7F668D52C0C7EBD06A91D19A0C0A5BC6865BC29000024A5815338E7C8D6460F61014E48E429F3F5C8822D91CFD20BCA9EECBF5852B52D2900001C000040048ED2CCF05924CC7F7062C4C75B06854E94C72A1C2900001C00004005B8F77050DED7E25C9D41F00A6FB1183C8E2905D4000000080000402E
2024-10-13 18:42:58.018053 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: responder received SA_INIT msg
2024-10-13 18:42:58.018099 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: received notify type NAT_DETECTION_SOURCE_IP
2024-10-13 18:42:58.018143 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: received notify type NAT_DETECTION_DESTINATION_IP
2024-10-13 18:42:58.018186 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: received notify type FRAGMENTATION_SUPPORTED
2024-10-13 18:42:58.018241 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: incoming proposal:
2024-10-13 18:42:58.018284 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: proposal id = 1:
2024-10-13 18:42:58.018317 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: protocol = IKEv2:
2024-10-13 18:42:58.018349 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: encapsulation = IKEv2/none
2024-10-13 18:42:58.018383 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=ENCR, val=AES_CBC (key_len = 128)
2024-10-13 18:42:58.018417 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2024-10-13 18:42:58.018450 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:42:58.018483 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=DH_GROUP, val=MODP2048.
2024-10-13 18:42:58.018515 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=DH_GROUP, val=MODP1536.
2024-10-13 18:42:58.018558 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: proposal id = 2:
2024-10-13 18:42:58.018590 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: protocol = IKEv2:
2024-10-13 18:42:58.018623 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: encapsulation = IKEv2/none
2024-10-13 18:42:58.018658 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=ENCR, val=AES_CBC (key_len = 256)
2024-10-13 18:42:58.018691 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2024-10-13 18:42:58.018723 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:42:58.018754 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=DH_GROUP, val=MODP2048.
2024-10-13 18:42:58.018786 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=DH_GROUP, val=MODP1536.
2024-10-13 18:42:58.018827 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: proposal id = 3:
2024-10-13 18:42:58.018858 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: protocol = IKEv2:
2024-10-13 18:42:58.018890 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: encapsulation = IKEv2/none
2024-10-13 18:42:58.018923 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=ENCR, val=AES_GCM_16 (key_len = 128)
2024-10-13 18:42:58.018955 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:42:58.018986 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=DH_GROUP, val=MODP2048.
2024-10-13 18:42:58.019020 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=DH_GROUP, val=MODP1536.
2024-10-13 18:42:58.019062 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: proposal id = 4:
2024-10-13 18:42:58.019094 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: protocol = IKEv2:
2024-10-13 18:42:58.019125 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: encapsulation = IKEv2/none
2024-10-13 18:42:58.019158 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=ENCR, val=AES_GCM_16 (key_len = 256)
2024-10-13 18:42:58.019191 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=PRF, val=PRF_HMAC_SHA2_384
2024-10-13 18:42:58.019223 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=DH_GROUP, val=MODP2048.
2024-10-13 18:42:58.019255 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=DH_GROUP, val=MODP1536.
2024-10-13 18:42:58.019295 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: proposal id = 5:
2024-10-13 18:42:58.019327 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: protocol = IKEv2:
2024-10-13 18:42:58.019359 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: encapsulation = IKEv2/none
2024-10-13 18:42:58.019395 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=ENCR, val=CHACHA20_POLY1305 (key_len = 256)
2024-10-13 18:42:58.019427 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:42:58.019460 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=DH_GROUP, val=MODP2048.
2024-10-13 18:42:58.019491 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: type=DH_GROUP, val=MODP1536.
2024-10-13 18:42:58.019536 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12334: no proposal chosen
2024-10-13 18:42:58.019628 ike V=root:Negotiate SA Error: [12803]
2024-10-13 18:43:03.435236 ike :shrank heap by 106496 bytes
2024-10-13 18:43:04.015921 ike V=root:0: comes y.y.y.y:500->x.x.x.x:500,ifindex=46,vrf=0,len=632....
2024-10-13 18:43:04.015992 ike V=root:0: IKEv2 exchange=SA_INIT id=a2ce63e352fc1b22/0000000000000000 len=632
2024-10-13 18:43:04.016035 ike 0: in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
2024-10-13 18:43:04.016150 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: responder received SA_INIT msg
2024-10-13 18:43:04.016196 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: received notify type NAT_DETECTION_SOURCE_IP
2024-10-13 18:43:04.016241 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: received notify type NAT_DETECTION_DESTINATION_IP
2024-10-13 18:43:04.016284 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: received notify type FRAGMENTATION_SUPPORTED
2024-10-13 18:43:04.016339 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: incoming proposal:
2024-10-13 18:43:04.016381 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: proposal id = 1:
2024-10-13 18:43:04.016414 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: protocol = IKEv2:
2024-10-13 18:43:04.016446 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: encapsulation = IKEv2/none
2024-10-13 18:43:04.016480 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=ENCR, val=AES_CBC (key_len = 128)
2024-10-13 18:43:04.016513 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2024-10-13 18:43:04.016546 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:04.016579 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:04.016611 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:04.016653 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: proposal id = 2:
2024-10-13 18:43:04.016684 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: protocol = IKEv2:
2024-10-13 18:43:04.016716 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: encapsulation = IKEv2/none
2024-10-13 18:43:04.016750 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=ENCR, val=AES_CBC (key_len = 256)
2024-10-13 18:43:04.016782 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2024-10-13 18:43:04.016814 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:04.016846 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:04.016878 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:04.016918 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: proposal id = 3:
2024-10-13 18:43:04.016950 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: protocol = IKEv2:
2024-10-13 18:43:04.016981 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: encapsulation = IKEv2/none
2024-10-13 18:43:04.017014 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=ENCR, val=AES_GCM_16 (key_len = 128)
2024-10-13 18:43:04.017046 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:04.017080 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:04.017112 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:04.017153 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: proposal id = 4:
2024-10-13 18:43:04.017185 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: protocol = IKEv2:
2024-10-13 18:43:04.017216 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: encapsulation = IKEv2/none
2024-10-13 18:43:04.017248 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=ENCR, val=AES_GCM_16 (key_len = 256)
2024-10-13 18:43:04.017281 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=PRF, val=PRF_HMAC_SHA2_384
2024-10-13 18:43:04.017312 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:04.017343 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:04.017384 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: proposal id = 5:
2024-10-13 18:43:04.017418 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: protocol = IKEv2:
2024-10-13 18:43:04.017452 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: encapsulation = IKEv2/none
2024-10-13 18:43:04.017485 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=ENCR, val=CHACHA20_POLY1305 (key_len = 256)
2024-10-13 18:43:04.017518 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:04.017550 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:04.017581 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:04.017627 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12335: no proposal chosen
2024-10-13 18:43:04.017707 ike V=root:Negotiate SA Error: [12803]
2024-10-13 18:43:08.445187 ike V=root:0:AzureFGT:12332: auto transport timeout, use tcp port 4500
2024-10-13 18:43:08.445253 ike V=root:0:AzureFGT:12332: auto transport tcp already up
2024-10-13 18:43:10.030828 ike V=root:accepts ike tcp-transport(vd=0, vrf=0, intf=0:46, x.x.x.x:4500->y.y.y.y:4087 sock=35 refcnt=2 ph1=(nil)) (2).
2024-10-13 18:43:13.012206 ike V=root:0: comes y.y.y.y:4087->x.x.x.x:4500,ifindex=46,vrf=0,len=632....
2024-10-13 18:43:13.012277 ike V=root:0: IKEv2 exchange=SA_INIT id=a2ce63e352fc1b22/0000000000000000 len=632
2024-10-13 18:43:13.012325 ike 0: in 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
2024-10-13 18:43:13.012426 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336:sa bind new tcp-transport(vd=0, vrf=0, intf=0:46, x.x.x.x:4500->y.y.y.y:4087 sock=35 refcnt=1 ph1=(nil))
2024-10-13 18:43:13.012467 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: responder received SA_INIT msg
2024-10-13 18:43:13.012506 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: received notify type NAT_DETECTION_SOURCE_IP
2024-10-13 18:43:13.012543 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: received notify type NAT_DETECTION_DESTINATION_IP
2024-10-13 18:43:13.012579 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: received notify type FRAGMENTATION_SUPPORTED
2024-10-13 18:43:13.012629 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: incoming proposal:
2024-10-13 18:43:13.012665 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: proposal id = 1:
2024-10-13 18:43:13.012692 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: protocol = IKEv2:
2024-10-13 18:43:13.012718 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: encapsulation = IKEv2/none
2024-10-13 18:43:13.012746 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=ENCR, val=AES_CBC (key_len = 128)
2024-10-13 18:43:13.012772 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2024-10-13 18:43:13.012802 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:13.012829 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:13.012856 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:13.012892 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: proposal id = 2:
2024-10-13 18:43:13.012918 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: protocol = IKEv2:
2024-10-13 18:43:13.012943 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: encapsulation = IKEv2/none
2024-10-13 18:43:13.012971 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=ENCR, val=AES_CBC (key_len = 256)
2024-10-13 18:43:13.012997 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2024-10-13 18:43:13.013023 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:13.013049 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:13.013074 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:13.013109 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: proposal id = 3:
2024-10-13 18:43:13.013135 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: protocol = IKEv2:
2024-10-13 18:43:13.013160 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: encapsulation = IKEv2/none
2024-10-13 18:43:13.013188 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=ENCR, val=AES_GCM_16 (key_len = 128)
2024-10-13 18:43:13.013214 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:13.013240 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:13.013266 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:13.013301 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: proposal id = 4:
2024-10-13 18:43:13.013326 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: protocol = IKEv2:
2024-10-13 18:43:13.013352 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: encapsulation = IKEv2/none
2024-10-13 18:43:13.013378 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=ENCR, val=AES_GCM_16 (key_len = 256)
2024-10-13 18:43:13.013405 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=PRF, val=PRF_HMAC_SHA2_384
2024-10-13 18:43:13.013430 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:13.013456 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:13.013491 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: proposal id = 5:
2024-10-13 18:43:13.013517 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: protocol = IKEv2:
2024-10-13 18:43:13.013542 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: encapsulation = IKEv2/none
2024-10-13 18:43:13.013569 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=ENCR, val=CHACHA20_POLY1305 (key_len = 256)
2024-10-13 18:43:13.013595 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:13.013621 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:13.013647 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:13.013688 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12336: no proposal chosen
2024-10-13 18:43:13.013752 ike V=root:Negotiate SA Error: [12803]
2024-10-13 18:43:13.013836 ike V=root:destorys tcp-transport(vd=0, vrf=0, intf=46:46, x.x.x.x:4500->y.y.y.y:4087 sock=35 refcnt=0 ph1=(nil)) (1).
2024-10-13 18:43:13.053164 ike V=root:accepts ike tcp-transport(vd=0, vrf=0, intf=0:46, x.x.x.x:4500->y.y.y.y:5355 sock=35 refcnt=2 ph1=(nil)) (2).
2024-10-13 18:43:19.010534 ike V=root:0: comes y.y.y.y:5355->x.x.x.x:4500,ifindex=46,vrf=0,len=632....
2024-10-13 18:43:19.010607 ike V=root:0: IKEv2 exchange=SA_INIT id=a2ce63e352fc1b22/0000000000000000 len=632
2024-10-13 18:43:19.010655 ike 0: in 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
2024-10-13 18:43:19.010759 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337:sa bind new tcp-transport(vd=0, vrf=0, intf=0:46, x.x.x.x:4500->y.y.y.y:5355 sock=35 refcnt=1 ph1=(nil))
2024-10-13 18:43:19.010800 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: responder received SA_INIT msg
2024-10-13 18:43:19.010837 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: received notify type NAT_DETECTION_SOURCE_IP
2024-10-13 18:43:19.010874 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: received notify type NAT_DETECTION_DESTINATION_IP
2024-10-13 18:43:19.010910 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: received notify type FRAGMENTATION_SUPPORTED
2024-10-13 18:43:19.010959 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: incoming proposal:
2024-10-13 18:43:19.010995 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: proposal id = 1:
2024-10-13 18:43:19.011022 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: protocol = IKEv2:
2024-10-13 18:43:19.011048 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: encapsulation = IKEv2/none
2024-10-13 18:43:19.011076 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=ENCR, val=AES_CBC (key_len = 128)
2024-10-13 18:43:19.011103 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2024-10-13 18:43:19.011130 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:19.011157 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:19.011183 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:19.011218 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: proposal id = 2:
2024-10-13 18:43:19.011244 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: protocol = IKEv2:
2024-10-13 18:43:19.011270 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: encapsulation = IKEv2/none
2024-10-13 18:43:19.011297 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=ENCR, val=AES_CBC (key_len = 256)
2024-10-13 18:43:19.011322 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=INTEGR, val=AUTH_HMAC_SHA2_256_128
2024-10-13 18:43:19.011348 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:19.011374 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:19.011400 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:19.011435 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: proposal id = 3:
2024-10-13 18:43:19.011461 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: protocol = IKEv2:
2024-10-13 18:43:19.011487 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: encapsulation = IKEv2/none
2024-10-13 18:43:19.011513 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=ENCR, val=AES_GCM_16 (key_len = 128)
2024-10-13 18:43:19.011540 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:19.011566 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:19.011591 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:19.011626 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: proposal id = 4:
2024-10-13 18:43:19.011652 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: protocol = IKEv2:
2024-10-13 18:43:19.011686 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: encapsulation = IKEv2/none
2024-10-13 18:43:19.011714 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=ENCR, val=AES_GCM_16 (key_len = 256)
2024-10-13 18:43:19.011741 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=PRF, val=PRF_HMAC_SHA2_384
2024-10-13 18:43:19.011767 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:19.011793 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:19.011827 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: proposal id = 5:
2024-10-13 18:43:19.011853 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: protocol = IKEv2:
2024-10-13 18:43:19.011878 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: encapsulation = IKEv2/none
2024-10-13 18:43:19.011905 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=ENCR, val=CHACHA20_POLY1305 (key_len = 256)
2024-10-13 18:43:19.011931 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=PRF, val=PRF_HMAC_SHA2_256
2024-10-13 18:43:19.011957 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=DH_GROUP, val=MODP2048.
2024-10-13 18:43:19.012001 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: type=DH_GROUP, val=MODP1536.
2024-10-13 18:43:19.012042 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12337: no proposal chosen
2024-10-13 18:43:19.012116 ike V=root:Negotiate SA Error: [12803]
2024-10-13 18:43:19.012198 ike V=root:destorys tcp-transport(vd=0, vrf=0, intf=46:46, x.x.x.x:4500->y.y.y.y:5355 sock=35 refcnt=0 ph1=(nil)) (1).
2024-10-13 18:43:19.045184 ike V=root:accepts ike tcp-transport(vd=0, vrf=0, intf=0:46, x.x.x.x:4500->y.y.y.y:10937 sock=35 refcnt=2 ph1=(nil)) (2).
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
IKE debug log is saying...
1. receiving 5 proposals
2. none of them is matching the local config.
"2024-10-13 18:42:55.016464 ike V=root:0:a2ce63e352fc1b22/0000000000000000:12333: no proposal chosen"
Toshi
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi, you can view below kb for the link :https://docs.fortinet.com/document/fortigate/6.2.16/cookbook/255100/ipsec-vpn-to-azure-with-virtual-...
Security all we want
Announcements
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
Related Posts
- Cannot add the aggregate vpn member 194 Views
- Corrupted big files over SSL VPN 338 Views
- TRAFFIC FORTIGATE OVER IPSEC 232 Views
- IKE_AUTH step is failing when... 294 Views
Labels
-
FortiGate
8,170 -
FortiClient
1,643 -
5.2
801 -
FortiManager
687 -
5.4
639 -
FortiAnalyzer
522 -
FortiSwitch
438 -
FortiAP
433 -
6.0
416 -
FortiClient EMS
375 -
5.6
362 -
FortiMail
302 -
6.2
251 -
FortiAuthenticator v5.5
234 -
5.0
196 -
FortiWeb
189 -
SSL-VPN
185 -
FortiNAC
164 -
IPsec
161 -
6.4
128 -
FortiGuard
127 -
FortiGateCloud
99 -
FortiSIEM
94 -
FortiCloud Products
94 -
SD-WAN
93 -
FortiToken
86 -
Customer Service
75 -
Wireless Controller
75 -
FortiAuthenticator
75 -
4.0MR3
64 -
Firewall policy
63 -
FortiProxy
54 -
Fortivoice
50 -
FortiEDR
50 -
FortiADC
50 -
VLAN
44 -
FortiExtender
43 -
High Availability
43 -
FortiDNS
42 -
ZTNA
42 -
FortiSandbox
39 -
DNS
36 -
FortiGate v5.4
35 -
Routing
35 -
LDAP
35 -
BGP
34 -
FortiSwitch v6.4
33 -
SAML
31 -
Interface
31 -
Certificate
31 -
Authentication
28 -
SSO
28 -
NAT
28 -
FortiConnect
27 -
FortiWAN
25 -
FortiConverter
25 -
RADIUS
24 -
VDOM
24 -
FortiLink
24 -
FortiGate v5.2
23 -
Application control
21 -
Web profile
21 -
Virtual IP
20 -
Fortigate Cloud
19 -
Logging
19 -
FortiSwitch v6.2
18 -
FortiPortal
18 -
FortiMonitor
17 -
Traffic shaping
17 -
FortiPAM
17 -
FortiDDoS
15 -
SSL SSH inspection
15 -
FortiGate v5.0
14 -
OSPF
14 -
IP address management - IPAM
13 -
FortiCASB
12 -
SSID
12 -
Admin
12 -
Static route
12 -
FortiManager v5.0
11 -
Automation
11 -
System settings
11 -
WAN optimization
11 -
Web application firewall profile
11 -
FortiSOAR
10 -
FortiRecorder
10 -
SNMP
10 -
IPS signature
10 -
4.0MR2
9 -
FortiGate v4.0 MR3
9 -
FortiManager v4.0
9 -
FortiWeb v5.0
9 -
FortiAP profile
9 -
FortiBridge
8 -
RMA Information and Announcements
8 -
Proxy policy
8 -
4.0
7 -
FortiAnalyzer v5.0
7 -
Security profile
7 -
Traffic shaping policy
7 -
Fabric connector
7 -
Port policy
7 -
Intrusion prevention
7 -
FortiCache
6 -
DNS filter
6 -
trunk
6 -
Packet capture
6 -
FortiCarrier
5 -
FortiDeceptor
5 -
FortiToken Cloud
5 -
FortiTester
5 -
Users
5 -
Antivirus profile
5 -
Traffic shaping profile
5 -
Fortinet Engage Partner Program
5 -
3.6
4 -
FortiScan
4 -
FortiDirector
4 -
Internet service database
4 -
Application signature
4 -
DLP sensor
4 -
Email filter profile
4 -
Netflow
4 -
Replacement messages
4 -
Web rating
4 -
FortiDB
3 -
FortiHypervisor
3 -
Explicit proxy
3 -
NAC policy
3 -
DLP Dictionary
3 -
DLP profile
3 -
DoS policy
3 -
VoIP profile
3 -
Multicast routing
3 -
FortiInsight
2 -
FortiAI
2 -
Kerberos
2 -
API
2 -
FortiNDR
2 -
Authentication rule and scheme
2 -
Protocol option
2 -
Schedule
2 -
SDN connector
2 -
Service
2 -
Zone
2 -
Cloud Management Security
2 -
4.0MR1
1 -
FortiManager-VM
1 -
FortiCWP
1 -
Subscription Renewal Policy
1 -
Video Filter
1 -
TACACS
1 -
Multicast policy
1
Top Kudoed Authors
| User | Count |
|---|---|
| 1558 | |
| 1033 | |
| 749 | |
| 443 | |
| 210 |
Broad. Integrated. Automated.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Security Research
Company
News & Articles
Copyright 2024 Fortinet, Inc. All Rights Reserved.