Re: link between public domain and local server

hhasny · 12-20-2024

Description This article describes the behavior of DNS status in an HA cluster. Scope FortiGate v7.2.x, v7.4.x and v 7.6.0. Solution In a HA cluster environment only the primary role unit would use the configured DNS server for name resolution. The s...

hhasny · 12-01-2024

Description This article describes a BGP peer flapping due to an IPv6 advertisement Scope FortiGate, Solution When FortiGate peers with other devices there are instances where the BGP peering with IPV4 would flap even though the link is stable. When ...

hhasny · 10-28-2024

Description This article describes why a default route or redundant route that is learned via eBGP is not installed in the FortiGate routing-table. Scope FortiGate. Solution When FortiGate has two ISP BGP peering that are advertising the default rout...

hhasny · 10-26-2024

Description This article describes how to have the FSSO CA display the workstation name. Scope FSSO CA. Solution The FSSO CA will show the logon users: In the above capture shows the Workstation as IP address instead of the hostname. Check the FSSO C...

hhasny · 09-03-2024

Description This article describes how to handle instances where there are different authtimeout values for different users or groups. Do so by configuring the authtimeout setting for each user or group. Scope FortiGate FortiOS. Solution In this exam...

hhasny · 08-13-2024

Hi @khaled88 , Are you sharing IPv6 routes? If not, try disabling the ipv6 family. config neighboredit "1.1.1.1"set activate6 disablenextend regards

hhasny · 08-13-2024

Hi @yeowkm99 , Are they both Fortigate firewalls? Try checking both end if the phase2 selector matches first. regards,

hhasny · 08-13-2024

Hi @idepato , Can you PING the sites? Can you traceroute the sites? Check reachability from your Fortigate and client machines first. If they are reachable, run the command shared by pkumari. regards,

hhasny · 05-15-2024

Hi, Verify first the SN matches what you have in the portal. If that good, try the following KB if it helps. https://community.fortinet.com/t5/FortiGate/Technical-Tip-The-license-still-shows-as-expired-after-renewal/ta-p/256101 It will instruct the F...

hhasny · 05-14-2024

Hi, AFAIK eval license would not be able to use certificate/encryption. regards,

User Statistics

User Activity

Technical Tip: DNS behavior in an HA cluster

Technical Tip: FortiGate BGP flapping due to IPv6 advertisement

Technical Tip: Redundant route not install in the routing-table from second ISP via eBGP dynamic routing

Technical Tip: FSSO CA does not display Workstation name

Technical Tip: Configuring different authtimeout for specific groups

Re: Configuration eBGP // HA cluster //

Re: IPsec tunnel shows tunnel is down

Re: I can't load some websites via fortigate

Re: Webfilter license won't work despite having an active subscription

Re: fortigate VM import CA certificate,incorrect certificate file format for CA/LOCAL/CRL/REMOTE cer

Re: link between public domain and local server

Re: Fortigate Static ARP , MAC Adress Based IP Fil...

Technical Tip: Redundant route not install in the ...

Technical Tip: FSSO CA does not display Workstatio...

Re: Configuration eBGP // HA cluster //

KCS