Troubleshooting Tip: 'Invalid ESP packet detected ...

preetisingh · 11-24-2025

Description This article describes how to use the proxy-arp configuration in tandem with intra-VLAN traffic blocking on a VLAN with a subnet greater than /24. Scope FortiOS, FortiLink. Solution Network connectivity: To block intra-VLAN traffic by agg...

preetisingh · 08-08-2025

Description This article describes how to limit protocols for SSL VPN personal bookmarks. Scope FortiGate. Solution By default, when users connect to a FortiGate in Web Portal mode, they can create bookmarks using an available protocol e.g. HTTP/HTTP...

preetisingh · 06-25-2025

Description This article describes how to check the hit count for a local-in policy. Scope FortiGate v7.0.4+. Solution Use the following command to check for local-in policy hit count: diagnose firewall iprope show 100001 This command will show the ...

preetisingh · 10-28-2024

Description This article describes how to understand and troubleshoot 'Invalid ESP packet detected (replayed packet)' error. Scope FortiOS. Solution The Error:Invalid ESP packet detected (replayed packet).Reason:A sequence number that monotonically i...

preetisingh · 08-20-2024

Description This article describes how to retrieve the application list from the FortiGate CLI. Scope FortiGate. Solution Login into the FortiGate CLI and execute the following command: get application name status Sample output: The output will conta...

preetisingh · 10-29-2024

refer the article to FortiGate HA upgrade procedure and the status during the upgrade.: https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-HA-upgrade-procedure-and-the-status/ta-p/246692

preetisingh · 10-27-2024

Traffic shaper policy are matched from top-down, so the traffic shaping policies should be arranged in a sequence that places the more granular policies above general policies. Verify the actual usage of the shaper policy in the 'Traffic Shapers' men...

preetisingh · 10-27-2024

You can block download from DLP. you can specify all file extension (i.e. .exe, .rar). https://community.fortinet.com/t5/FortiGate/Technical-Tip-DLP-Configuration-to-Block-by-file-type-and/ta-p/218034

preetisingh · 10-27-2024

Can you share ospf configuration. refer : https://community.fortinet.com/t5/FortiGate/Technical-Tip-Announcing-SSL-VPN-address-range-into-OSPF/ta-p/239418

User Statistics

User Activity

Technical Tip: How to configure proxy-arp with intra-VLAN traffic blocking enabled for subnet greater than /24

Technical Tip: Limiting protocols in FortiGate SSL VPN personal bookmark

Technical Tip: How to collect local-in policy's hit count