Fortinet Community

kcheng · 03-24-2023

Description This article describes the discovery of Backup File Disclosure vulnerability observed on FortiOS 7.0.x and 7.2.x by Nessus Vulnerability Scanner (ref: https://www.tenable.com/plugins/nessus/11411). Scope FortiOS 7.0.x, 7.2.x. Solution Thi...

kcheng · 02-28-2023

Description This article describes the troubleshooting steps and the command that can be used to troubleshoot Google DNS with DNS over TLS showing as unreachable. Scope FortiGate 6.2.0 and above. Solution DNS over TLS is introduced in FortiOS 6.2.0 a...

kcheng · 02-03-2023

Description This article describes how to troubleshoot IPSec error: 22: Invalid argument. Scope FortiGate Solution 1) IPSec Tunnel is configured between FG-A and FG-B with the following Phase2 selector setting: FG-A: [IPSec_local] IPSec_local_subnet_...

kcheng · 01-03-2023

Description This article describes the solution and troubleshooting steps when IPSec user is unable to get IP address assignment from external DHCP Server. Scope FortiOS, IPSec, external DHCP Server. Solution Topology: 1) It is possible to configure ...

kcheng · 12-15-2022

Description This article describes how to fix the situation where it is impossible to configure 'Default Reply To' via GUI and CLI. Scope FortiOS 6.4.10 and above, FortiOS 7.0.8 and above, FortiOS 7.2.0 and above. Solution Starting from FortiOS 6.4.1...

kcheng · 02-03-2023

Hi @nikmag As long as you do not have a plan to centrally manage the FortiGates via FortiManager, you can ignore the respective status. If you had previously imported the device settings and policy into FortiManager, the status showing as conflict, o...

kcheng · 02-03-2023

Hi @Sylvia @AEK is correct. The last column is showing the CPU # on which the process is running on. That would be helpful to identify in troubleshooting high CPU cases.

kcheng · 02-03-2023

Hi @Umesh In order to check the respective, please refer to the following document: https://community.fortinet.com/t5/FortiGate/Technical-Tip-SSH-Server-Supports-Weak-Key-Exchange-Algorithms/ta-p/214534 You should consider hardening your FortiGate to...

kcheng · 01-29-2023

Hi @Doppler79 Good day to you. Please be informed that API support would require access to https://fndn.fortinet.net. You may want to get in touch with your local SE or account manager and request for the access as it requires 2 Fortinet Sponsors for...

kcheng · 01-04-2023

Hi @MRPUGH55 In order for your user to connect to your business network, you will need to setup a VPN gateway. If you already owned a FortiGate, you can configure FortiGate as your VPN gateway. Depending on your need, you can configure either SSLVPN ...

Fortinet Community

User Statistics

User Activity

Technical Tip: Discovery of backup file disclosure in FortiOS 7.0.x and 7.2.x by Vulnerability Assessment Tool

Troubleshooting Tip: Google DNS with DNS over TLS showing as unreachable

Troubleshooting Tip: IPSec error: 22: Invalid argument

Technical Tip: Unable to get IP from external DHCP server for IPSec user

Technical Tip: Unable to configure 'Default Reply To' via GUI and CLI

Re: Upgrade fortigates with fortimanager

Re: "diag sys top" - there is a new column... what does it mean?

Re: SSH Server Supports Weak Key Exchange Algorithms

Re: Ansible Updates

Re: Simple Queston

Technical Tip: Using an externally signed local ce...

Re: "diag sys top" - there is a new column... what...

Re: system email-server set reply-to is not work o...

Technical Tips: Troubleshooting PPPoE connection f...

Technical Tips: Poll Active Directory (FSSO) conne...

Re: Upgrade fortigates with fortimanager

Re: "diag sys top" - there is a new column... what...

Re: system email-server set reply-to is not work o...

Re: Policy Violations in 'Log View"

Re: Forticonverter