Technical Tip: How to limit the SSL and TLS versio...

athirat · 06-24-2024

Description This article describes how to prevent the sending of 'subtype=fgfm' logs from FortiManager to the syslog server. Scope FortiManager. Solution By default, the below logs highlighting fgfm connection changes between FortiManager and managed...

athirat · 06-24-2024

Description This article describes how to fix issues with DHCP relay setups not working after upgrading to FortiOS v7.0.1 onwards when local-in policies are in use. Scope FortiOS v7.0.1 onwards. Solution After the upgrade of FortiGate setup as DHCP r...

athirat · 05-02-2023

Description This article describes issues that occur during VPN establishment due to 'signature verification failed' errors in IKE debug logs for an IKEv2 certificate based IPsec VPN. Scope All versions of FortiGate. Solution This error is seen if Fo...

athirat · 03-08-2023

Description This article describes how to increase the memory buffer for processing IP fragment packets on FortiGate to avoid drops due to 'ReasmFails' owing to a memory buffer overflow in environments where a large number of fragments are expected t...

athirat · 08-30-2022

Description This article describes about how to enable mac address bypass on FortiGate interfaces. MAC Authentication Bypass (MAB) is supported to accept non-802.1X compliant devices onto the network using their MAC address as authentication. Scope A...

athirat · 11-21-2021

Could you share the below configuration snippet : show sys dhcp server RegardsAthira

athirat · 11-17-2021

Hello, Based on the description, issue could be due to the fact there is no route available/active towards the VPN remote gateway via wan2 in the routing-table. This is why it works when you add wan2 into SDWAN (since default route via wan2 gets acti...

athirat · 11-17-2021

Hello, Once HA reserved management interfaces are added on FGT , they are automatically mapped to a hidden vdom called vsys_hamgmt. The routing and ARP details on HA dedicated management interface are solely available in this vdom.You can check the r...

User Statistics

User Activity

Technical Tip: How to prevent syslog logging of local fgfm connection related events from FortiManager

Troubleshooting Tip: DHCP Discover packets dropped despite dhcp-relay-service enabled on ingress interface after upgrading FortiOS to v7.0.1 and above

Technical Tip: Understanding 'signature verification failed' errors in IKE debug logs in an IKEv2 certificate based IPsec VPN

Technical Tip: How to increase memory buffer for processing fragment packets

Technical Tip: How to enable mac address bypass on FortiGate interfaces

Re: Problem adding DHCP option, says option is in use

Re: Ipsec and SD-WAN

Re: HA reserved management interfaces in a different VRF

Technical Tip: How to limit the SSL and TLS versio...

Technical Tip: How to increase memory buffer for p...

Technical Tip: Authentication fails with 'clock sk...

Technical Tip: How FortiGate handles 'Untrusted SS...

Re: HA reserved management interfaces in a differe...

KCS

Fortinet Training Institute