Technical Tip: Decrypt ESP packets

welnaggar · 05-07-2020

Description This article describes how to push static routes from FortiGate DHCP server using RFC 3442 DHCP Option 121.Solution DHCP Option 121 uses hexadecimal representation of decimal values. It is compatible with all Windows machines except XP an...

welnaggar · 04-17-2020

Description This article describes how to decrypt captured Encapsulated Security Payload (ESP) packets initiated or terminated on FortiGate using Wireshark. Scope FortiGate. Solution In some case, network administrators need to track specific packets...

welnaggar · 11-29-2019

DescriptionThis article describes how to use a source IP for internal workings.SolutionIn this scenario, it’s assumed that Fortigate is behind a router/firewall that only allows traffic coming with a source IP address x.x.x.xNormally, an IPPool can b...

welnaggar · 11-15-2019

Description This article describes how to access internal resources over SSL VPN via external IP address.The following high level diagram illustrates the scenario: Solution Site A network connects to SSL VPN to access remote resources (Site B network...

welnaggar · 10-31-2019

DescriptionThis article describes how to configure server load balancing in active-standby mode and monitor it using the health check tool.The following high level diagram illustrates the scenario:SolutionFortiOS has the ability to use server load ba...

User Statistics

User Activity

Technical Tip: Push static routes from DHCP server

Technical Tip: Decrypt ESP packets

Technical Tip: how to use a source IP for internal workings

Technical Tip: Hairpin NAT over SSL VPN

Technical Tip: Active-Standby Virtual Servers (Server Load balancing)

Technical Tip: Decrypt ESP packets

Technical Tip: Broadcast traffic over site-to-site...

Technical Tip: Configure policy routes for route-b...

Technical Tip: Hairpin NAT over SSL VPN

KCS