About anandpatel

anandpatel · 03-26-2020

DescriptionThe Fortigate IPsec VPN phase 1 is set to initiate the IKE SA negotiation by default. The option is available to disable it and respond only with the IKE SA initiation from remote peer side.This article describes how to disable this option...

anandpatel · 11-22-2019

DescriptionThis article describes how to verify if SIP session helper or SIP ALG are used to process the SIP traffic.SolutionIn case the SIP session helper is being used instead of the SIP ALG, one can use the #diagnose sys sip command to determine i...

anandpatel · 10-11-2019

DescriptionThis article explains how to use Automatic Address Creation for Attached Networks.For all interfaces set to a LAN or DMZ role, a new option is available to automatically create an address object for the connected network. This feature help...

anandpatel · 09-13-2019

Description This article describes that in a source or destination NAT firewall policy that accepts SIP sessions, it is possible to configure the SIP ALG (or the SIP session helper) to remove the original source IP address of the SIP message in the S...

anandpatel · 06-25-2019

DescriptionThis article describes how to troubleshoot the fact that a FortiNAC running on HA (Control Server/Application Server Pair), which requires a reboot for maintenance, does not perform a failover.SolutionImportant: For L2 HA configurations, d...

User Statistics

User Activity

Technical Tip: IPsec VPN response only in phase-1

Technical Tip: How to check conflicts between the SIP ALG and the session helper

Technical Tip: Automatic Address Creation for Attached Networks

Technical Tip: SIP Helper / ALG preserve source IP and port information

Troubleshooting Tip: FortiNAC Control Server/Application Server HA Pair restart without causing failover

KCS