Technical Tip: Formatting and loading FortiGate fi...

haljawhari · 08-16-2020

DescriptionIn some scenarios, mode config option may is disabled on a dialup client-to-site IPsec VPN tunnel. The Assigned IP address, DNS server and split tunnel addresses is manually set. However, the split tunnel option is not visible in the GUI o...

haljawhari · 03-02-2020

Description This article describes how local-in policy behaves with ingressing ESP packets.Solution A local-in policy can be created to block ESP (protocol 50) packets, but this is not recommended as a main security practice as it eliminates SPI vali...

haljawhari · 02-05-2020

Description This article describes how to downgrade to the last firmware image after upgrading. Solution When FortiGate is upgraded, the previous firmware image that was running before the upgrade will still be stored as a backup firmware image on th...

haljawhari · 02-03-2020

DescriptionPolling FortiGate from SolarWinds via SNMPv3 with AES256 encryption fails despite all configuration parameters being correct. This sometimes can be caused by difference in the method used by each appliance to manipulate encryption key size...

haljawhari · 06-17-2019

PurposeThis article explains how to access features for FortiClient users when the Mode config option is disabled on a dialup client-to-site IPSec VPN tunnel. Normal 0 false false false EN-GB X-NONE AR-SA /* Style Definitions */ table.MsoNormalTable ...

User Statistics

User Activity

Technical Tip: Configuration of split tunnel addresses on Mac OS When the options are manually set

Technical Tip: ESP Packets are not blocked by local-in policy

Technical Tip: Downgrading firmware image after upgrade

Technical Tip: How to fix SNMPv3 AES256 encryption is not working with SolarWinds

Technical Tip: Enabling Mode Config features on Forticlient when Mode Config on dialup IPSec tunnels is disabled from Fortigate.

Technical Tip: Formatting and loading FortiGate fi...

Technical Tip: How to fix SNMPv3 AES256 encryption...

Fortinet Training Institute

KCS