Re: Traceroute force to ip6

imathew · 05-27-2024

Description This article discusses VA Remedy for ssl-static-key-ciphers. Scope FortiGate. Solution The main cause of this type of vulnerability is the use of TLS1.0, which utilizes a 'Static Key Cipher'. Although this is considered a 'low severity' v...

imathew · 10-11-2023

Description This article describes how to fix an issue where the CPU on a specific core goes high on SoftIRQ and stops processing traffic. Scope FortiGate-F series. Solution On the firewall, the CPU on a specific Core might go high on SoftIRQ. Free m...

imathew · 08-31-2023

Description This article describes how to resolve an issue where the tunnel interface is not visible in the GUI and cannot be selected in a firewall policy or static routes. Scope FortiGate v7.2.5. Solution This issue is purely cosmetic. It triggers ...

imathew · 08-01-2023

Description This article describes how to interpret the output 'diag test app wad 21'. Scope FortiGate. Solution diag test app wad 21 TCP stats: active=29890 accepts=0 connects=83701245 accept_err=0 connect_err=87970 bind_fails=0 make_failure=0 conne...

imathew · 10-30-2022

Description This article describes that EBGP routes with MED attribute will not be sent from one EBGP peer to another EBGP peer. Scope FortiGate. Solution The BGP multiple exit discriminator (MED, or MULTI_EXIT_DISC) is a non-transitive attribute, me...

imathew · 05-29-2024

Hi TribenZ, We can use the command "execute traceroute-options" to do a traceroute on IPv4. For more details, Kindly check the below KB. https://community.fortinet.com/t5/FortiClient/Troubleshooting-Tip-Using-traceroute-options-from-FortiGate-CLI/ta-...

imathew · 07-24-2023

Hi, config system settingsset dhcp-proxy enableset dhcp-server-ip "1.1.1.1" "2.2.2.2" end FOS does support multiple server IP addresses to be configured. Technical Tip: SSL VPN with external DHCP Server - Fortinet Community Hope the above article ans...

imathew · 06-23-2022

I believe your requirement is to send only HTTP and HTTPS traffic over the IPsec tunnel. Under phase2 selectors, you can use Remote Port and Protocol options. Maybe this will help with your requirement.

User Statistics

User Activity

Technical Tip: VA Remedy for ssl-static-key-ciphers

Troubleshooting Tip: FortiGate-F Series: Firewall stops processing traffic when Free memory was low on device

Troubleshooting Tip: Tunnel interface is not visible in GUI and cannot be selected in a firewall policy or in static routes

Technical Tip: Interpret the output 'diag test app wad 21'

Technical Tip: EBGP routes with MED Propagation