Re: Port forwarding issue with two different ports

ssteo · 09-29-2025

Description This article describes how to block Snapchat using ISDB. Scope FortiOS. Solution Go to Policy & Objects -> Firewall Policy -> Create New. Name = Block Snapchat. Incoming Interface = LAN. Outgoing Interface = WAN. Source = LAN network segm...

ssteo · 09-29-2025

Description This article describes how to use a specific source IP for certificate communication. Scope FortiGate. Solution In some scenario, when validation of certificates over an IPsec tunnel only allow certain IPs to pass through. If the source I...

ssteo · 11-12-2024

Description This article describes how to configure FortiAuthenticator to integrate Linux Ubuntu (radius client).FortiToken Mobile as two factor authentication. Scope FortiAuthenticator, Linux Ubuntu. Solution Linux Ubuntu configuration. Install the ...

ssteo · 10-21-2024

Description This article describes that the active license is needed when performing firmware upgrades. Scope FortiGate v7.4.2 and above. Solution From v7.4.2 and above, an active license is needed for firmware upgrade. Use the command below to verif...

ssteo · 09-23-2024

Description This article describes the Radius connection issue with FortiAuthenticator after FortiGate upgraded to 7.2.10 or 7.4.5. Scope FortiGate v7.2.10/v7.4.5, FortiAuthenticator v6.4.9, v6.5.5, v6.6.1 or older. Solution After FortiGate upgrades ...

ssteo · 04-28-2024

Hello jnapier4, The firewall policy that you need is from source interface ssl.root to destination interface VLAN30.

ssteo · 04-28-2024

Hello martyyy, You need to make sure the speed/duplex on that wan port that you going to upgrade had auto negotiate/hard code to 1Gbps/full duplex. If not when the speed had upgraded to 200Mbps, the speed will cap at 100Mbps.

ssteo · 03-16-2024

Hello, You can run packet sniffer to verify whether got incoming IPSEC traffics or not. Below are the command: diagnose sniff packet any "port 500 or port 4500" 4 0 Then try connect IPSEC from your PC and see got any output or not. If no output, that...

ssteo · 03-16-2024

Hello, You can run packet sniffer on Fortigate and verify whether got incoming traffics or not. Below is the command: diagnose sniff packet any "port 3390" 4 0 If you did not see any output, it might block by upstream device.

ssteo · 02-07-2024

Hello yeowkm99, If using default email setting, is the email alert able send out?

User Statistics

User Activity

Technical Tip: How to block Snapchat using ISDB

Technical Tip: FortiGate certificate communication with a specific source IP

Technical Tip: Integrating Linux Ubuntu with FortiAuthenticator (username+password+FortiToken) for SSH

Technical Tip: TheFortiGate license is needed for firmware upgrade

Troubleshoot Tip: Radius connection issue with FortiAuthenticator after FortiGate upgraded to 7.2.10/7.4.5

Re: Can't ping VLAN interfaces through VPN

Re: How to upgrade WAN bandwidth

Re: Problem connecting to FortiGate IPsec VPN via remote access