Technical Tip: How to disable mTLS temporarily

Oscar_Wee · 12-15-2025

Description This article explains why DNS over TLS (DoT) is able to mitigate 'Secure Client-Initiated Renegotiation' or 'Client-initiated Re-negotiations'. Scope FortiGate. Solution DNS over TLS (DoT) is not intrinsically susceptible to the legacy SS...

Oscar_Wee · 12-14-2025

Description This article describes the steps to disable MTLS temporarily via CLI. Scope All FortiGates. Solution Enter the following commands in the CLI to disable mTLS (Mutual Transport Layer Security) authentication on the FortiGate: config authent...

Oscar_Wee · 10-21-2025

Description This article describes an error that occurs when using NTLM authentication with explicit web proxies on the FortiGate/FortiProxy. Scope Explicit Web Proxy, FortiGate/FortiProxy. Solution Reviewing WAD debug logs may reveal that the FortiG...

Oscar_Wee · 09-23-2025

Description This article describes the issue 'Network Error: Software caused connection abort' when Putty sessions to FortiGate close unexpectedly. Scope FortiGate. Solution Steps to configure Putty. Open PuTTY. Load saved connection settings, if ava...

Oscar_Wee · 08-19-2025

Description This article describes how to combine two Phase Two selectors in an IPSEC VPN into one Phase Two selector using a super net. Scope FortiGate. Solution In this example, subnets of two selectors are to be combined into one super net. Subnet...

User Statistics

User Activity

Technical Tip: DNS over TLS (DoT) mitigates 'Secure Client-Initiated Renegotiation' or 'Client-initiated Renegotiations'