Technical Tip: Bi-directional Forwarding Detection...

aionescu · 12-04-2025

Description This article illustrates FortiGate behavior when the threat feed list is empty. In some scenarios, a configured external threat feed will be wrongfully edited and the IP addresses will be deleted. Scope FortiGate. Solution To configure th...

aionescu · 10-06-2025

Description This article explains how to correlate port counters with the various components of FortiGate NP7-based platforms. Scope NP7 Hardware Platforms. Solution The 'diagnose hardware deviceinfo nic ' command in FortiOS displays port information...

aionescu · 06-26-2025

Description This article describes how to disable preemption in the HA configuration. Scope FortiAnalyzer. Solution In FortiAnalyzer v7.4.7 and v7.6.2, preemption was introduced. It is enabled by default when selecting the 'Preferred role' as Primary...

aionescu · 11-06-2024

Description This article describes how to change the LDAP user and group cache on FortiGate configured as explicit proxy. Scope FortiGate v7.4.2+ Solution Starting with v7.4.2 the following commands were introduced: diagnose debug enablediagnose test...

aionescu · 09-12-2024

Description This article describes how to interpret the values of the 'craction' field in traffic logs. Scope FortiGate. Solution The field 'craction' can be seen in the traffic logs in the context of threat weight and IPS inspection. For further exp...

aionescu · 05-21-2025

Hi @ScotDiGe , welcome to the Fortinet Community! Your issue is not very clear but, but a good troubleshooting starting point, is to understand how the FortiGate handles the traffic. To do this you could run a debug of the traffic flow, as described ...

aionescu · 05-08-2023

Hi, can you share the output of the following commands, ran on both FortiGates. diagnose debug resetdiagnose debug console timestamp enablediagnose debug flow filter addr x.x.x.x <------------where x.x.x.x is the IP of an OSPF routerdiagnose debug fl...

aionescu · 05-05-2023

Hi @jm-barreto, welcome to the community. Can you share with us the ospf configuration? Also, please update us with the output of the get router info ospf neighbor command and of the ones from https://community.fortinet.com/t5/FortiGate/Technical-Tip...

aionescu · 05-05-2023

Hi @crti , welcome to the community. Please find more info about that log at: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Explanation-of-Unknown-SPI-message-in-Event-log/ta-p/190530

aionescu · 03-16-2023

Hi @psetoo , it is not very clear what you are trying to achieve. Can you upload a basic network diagram that explains the setup?

User Statistics

User Activity

Technical Tip: FortiGate behavior when external threat feed list is empty

Technical Tip: Mapping Port Counters on NP7 Hardware Platforms

Technical Tip: FortiAnalyzer HA preemption

Technical Tip: How to change the LDAP user and group cache update times on FortiGate

Technical Tip: Explanation of 'craction' value

Re: Shoretel IP Phone Issue over BGP with ADVPN

Re: OSPF with vxlan over IPSec

Re: OSPF with vxlan over IPSec

Re: VPN Problems

Re: Routing issue

Technical Tip: Bi-directional Forwarding Detection...

Technical Tip: FortiAnalyzer HA preemption

Re: How do I schedule a reboot in FortiGate firewa...

Re: Point to point connection between 2 sites

Technical Tip: Explanation of the DPD effect on a ...

Re: How do I schedule a reboot in FortiGate firewa...

Re: how to reset hit counts for SD-WAN rules?

Re: FortiGate FGCP A-P Virtual Switch MAC Address

Re: SSLVPN to Azure VPN traffic not flowing

Re: Hardware Switch Interface Vlan Configuration

KCS

User Statistics

User Activity

You are leaving our website