Description This article describes why the LDAP Tree does not sync
between the FortiAuthenticator configured in a Load Balancing mode.
Scope FortiAuthenticator. Solution FortiAuthenticator can be configured
in two different clustering modes. Active-P...
Description This article describes how to use and troubleshoot the
FortiGuard-based SLA database for performance SLA used in SD-WAN. Scope
FortiGate v7.6+. Solution A newly available FortiGuard-based SLA
database includes popular SaaS and internet-ba...
Description This article describes how to fix an intermittent block or
allow traffic when using XFF to validate an IP address transmitted by
AGW. Scope FortiGate 7.4.4 and above. Solution Azure Application Gateway
(AGW) may reuse a session when sendi...
Description This article describes the requirement of diagnostic outputs
and debugs for certain issues. Scope FortiGate. Solution Logging and
debugging are both essential tools for troubleshooting, but they serve
different purposes. Logging records e...
Description This article provides info on how to allow EIGRP packets to
traverse through the Virtual wire pair interfaces on FortiGate. Scope
FortiGate Solution Virtual Wire Pair: The Virtual Wire Pair allows to
configure 2 interfaces with no IP addr...
Hi , The below article will help you on the same.
https://docs.fortinet.com/document/fortigate/7.6.4/administration-guide/249147/sd-wan-traffic-shaping-and-qos
Hi Karaked, Anti-replay is a local setting for IPsec phase2. It is not
negotiated between IPsec peers, meaning it does not impact the
establishment of tunnels. Enable or disable Anti-Replay as follows in in
IPsec phase2 configuration: # config vpn ip...
Hi, You can try editing the xml file from the forticlient settings. 1)
Download Forticlient configuration backup (XML file) from FortiClient
settings.2) Open the file using a text editor (e.g. NotePad++).3) Search
for the IPSec tunnel name.4) The spl...
Hi , There are few configuration which needs to enabled when setting up
a HA in a ipsec vpn configured firewalls as below : 1. session-pickup
under HA settings config vpn ipsec phase1-interface edit (vpn-name) set
ha-sync-esp-seqno enable end 2. ha-s...
Hi , We believe that you are having some questions on the packet
sniffing option available on the FGT. Packet sniffing is the
troubleshooting options available in FortiGate CLI to check the traffic
flow by capturing packets reaching the FortiGate uni...
