Technical Tip: Configuring and troubleshooting an ...

amalsky · 01-21-2026

Description This article describes why a local-in policy does not block Dynamic Host Configuration Protocol (DHCP) requests on a FortiGate firewall. This is not a FortiGate product limitation, but rather a result of how the FortiOS kernel processes b...

amalsky · 12-24-2025

Description This article describes how to configure, diagnose, and troubleshoot an IKEv2 site-to-site IPsec VPN between a Cisco router and a FortiGate firewall using a route-based (VTI) design.It also documents the whole troubleshooting process with ...

amalsky · 11-28-2025

Description This article describes how to configure TCP Authentication Option (TCP-AO) for BGP peering between FortiGate firewalls and third-party vendors (Cisco or Juniper routers, for example).It also provides comprehensive troubleshooting guidance...

amalsky · 11-28-2025

Description This article describes how to automatically deploy a FortiGate HA cluster (Active-Passive) in GCP using an interactive PowerShell script that integrates Terraform and gcloud CLI. Scope FortiGate. Solution The automation performs a complet...

amalsky · 08-28-2025

Description This article describes how to configure 'bidirectional DNS synchronisation' between a FortiGate and a BIND server (running on OPNsense) over a VXLAN tunnel transported inside an IPsec VPN. Scope FortiGate v7.0, v7.2, v7.4, v7.6. Solution ...

User Statistics

User Activity

Technical Tip: Local-in policies do not block DHCP requests on FortiGate