Troubleshooting Tip: Unable to delete a tunnel int...

jangelis · 08-20-2024

Description This article describes how to run some 'diagnostic test application' commands as a read-only administrator. Scope FortiGate. Solution Sometimes the admin has only read-only access to the FortiGate, but to be able to troubleshoot some issu...

jangelis · 08-06-2024

Description This article describes the case of BGP default route advertisement with as-path prepending. Scope FortiOS. Solution There are two links between FortiGates. A default route should be advertised from FGT2 to FGT1 via BGP and one link should...

jangelis · 01-14-2024

Description This article describes the conditions under which wildcard FQDN address objects get populated. Scope FortiGate. Solution Support for wildcard FQDN addresses in firewall policy has been added in FortiOS 6.2.2. Unlike standard FQDNs, the wi...

jangelis · 11-06-2022

Description This article describes that in some scenarios, the health check probes might choose an unexpected gateway resulting in probe failure. The requirement is to route health-check probe packets via different routers. In this example, server1 a...

jangelis · 09-29-2022

Description This article describes the recommended configuration on the FortiGate for an HTTPS Virtual Server with deep inspection. Note: Some Low-end models do not support load balancing of secure protocols (HTTP, HTTPS, IMAPS, POP3S, SMTPS, and SSL...

jangelis · 02-28-2022

Hello Thomas,If I am correct the 172.16.20.x is the network configured on the internal interface, right?FortiGate listens on some wan interface with another IP, correct?And you are trying to connect to this wan IP (which is represented by VPN..com) w...

jangelis · 02-27-2022

Hell Thomas,I am not sure I correctly understand the desired topology.Could you please attach a network diagram with IP addresses and connections, to get the idea?Thanks,Jakub

jangelis · 02-21-2022

Hi,what model on which FortiOS? 

jangelis · 02-16-2022

o.k. I see that is basically the default.However in this case, if the wifi users get IPs from 192.168.68.0/24, then this WiFi-AP must do the NAT and translate the traffic to 192.168.1.x, and this ingresses port1 on FortiGate, correct?If this is so, t...

jangelis · 02-16-2022

Hello,is it possible to share the output of this command:diagnose ip address listto better understand the topology?Jakub

User Statistics

User Activity

Technical Tip: Running the 'diagnose test application' command as a read-only administrator

Technical Tip: BGP default route advertisement with as-path prepending

Troubleshooting Tip: Wildcard FQDN addresses are not getting populated

Technical Tip: Route selection for SDWAN healthcheck probes

Technical Tip: Recommended configuration for HTTPS Virtual Server with deep inspection

Re: FortiGate SSL-VPN

Re: FortiGate SSL-VPN

Re: FortiGate Does not show the Hardware switch option in GUI

Re: Static Routes on ForiGate 80F

Re: Static Routes on ForiGate 80F

Troubleshooting Tip: Unable to delete a tunnel int...

Technical Tip: Behavior of TCP-MSS setting under s...

Troubleshooting Tip: Wildcard FQDN addresses are n...

Technical Tip: Recommended configuration for HTTPS...

Technical Tip: Running the 'diagnose test applicat...

Re: Admin Gui login with SSL-VPN

KCS