Description This article describes the steps to troubleshoot and resolve
the issue of an HA not synchronizing due to a wanopt mismatch. Scope
FortiGate. Solution Go to to System -> HA and hover over the Secondary
to see what is out of sync. The 'Not ...
Description This article explains why a policy with NAT enabled does not
keep NAT setting after policy is set to DENY temporarily. Scope
FortiGate. Solution Here is a normal policy with NAT enabled. The same
policy is now set to DENY: The same policy...
Description This article explains how to resolve the 'Capture-packet
cannot be enabled without storage disk' error when attempting to modify
a policy. Scope FortiGate. Solution While attempting to modify a policy,
the following error is seen: Capture...
Description This article provides a list of resources for the "Unable to
Setup VPN" error that can occur in different scenarios when using the
IPsec VPN Wizard. Scope FortiGate. Solution The error 'Unable to Setup
VPN' happens in the last step of rec...
Description This article describes why recreating a remote access IPsec
VPN can generate the error 'Unable to Setup VPN'. Scope FortiGate.
Solution The error 'Unable to Setup VPN' happens in the last step of
recreating an IPsec Remote Access VPN. Thi...
You can set up an automation stitch. See the following article for more
details:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-permanently-block-SSL-VPN-failed-logins/ta-p/287171
You can also refer to these two links for some guidance:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Restrict-YouTube-access-to-specific-channels/ta-p/197740
https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/190873...
It does go into some detail about it in the hardening guides.
https://docs.fortinet.com/document/fortigate/6.4.0/hardening-your-fortigate/995103/building-security-into-fortios
https://docs.fortinet.com/document/fortigate/7.2.0/best-practices/555436/h...
On the FortiGate, the Network > Interfaces page, you can see the
FortiGate interface connected to the FortiSwitch unit. The GUI indicates
Dedicated to FortiSwitch in the IP/Netmask field. There's a column to
the very far right that has clickable refe...
You can try to go through the steps in the following article:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Transfer-the-DDNS-record-to-new-FortiGate/ta-p/196467
If that doesn't work, create a support ticket and we will be happy to
help y...