DescriptionThe Fortigate IPsec VPN phase 1 is set to initiate the IKE SA
negotiation by default. The option is available to disable it and
respond only with the IKE SA initiation from remote peer side.This
article describes how to disable this option...
DescriptionThis article describes how to verify if SIP session helper or
SIP ALG are used to process the SIP traffic.SolutionIn case the SIP
session helper is being used instead of the SIP ALG, one can use the
#diagnose sys sip command to determine i...
DescriptionThis article explains how to use Automatic Address Creation
for Attached Networks.For all interfaces set to a LAN or DMZ role, a new
option is available to automatically create an address object for the
connected network. This feature help...
DescriptionIn a source or destination NAT security policy that accepts
SIP sessions, it's possible to configure the SIP ALG or the SIP session
helper to preserve the original source IP address of the SIP message in
the Session Description Protocol (S...
DescriptionThis article describes how to troubleshoot the fact that a
FortiNAC running on HA (Control Server/Application Server Pair), which
requires a reboot for maintenance, does not perform a
failover.SolutionImportant: For L2 HA configurations, d...