Technical Tip: BGP prefix compared to static local...

mkatary · 03-31-2022

Description This article describes why, in some cases where NPU offloading is enabled on IPsec tunnels, the NP6 IPsec engine may drop ESP packets due to large amount of layer 2 padding. A solution is offered. Scope FortiGate. Solution First, capture ...

mkatary · 03-31-2022

Description There is a known behavior of MacOS Monterey forticlient not able to connect not able to connect to Fortigate over SSL-VPN. This article describes that this issue will appear for users using free FortiClient VPN version. Scope Confirm TLS ...

mkatary · 02-09-2022

Description This article describes how to troubleshoot IPsec VPN tunnel errors due to traffic not matching selectors. Scope Solution The customer may complain about increasing errors appearing on the IPsec VPN interface. # fnsysctl ifconfig RX packet...

mkatary · 02-09-2022

Description This article describes how to configure a tunnel interface for BGP over Azure Vnet VPN. Scope Configuring a site-to-site VPN connection from a local FortiGate to an Azure VNet VPN via IPsec VPN with BGP. Notice that the BGP neighborship i...

mkatary · 01-19-2022

Description This article describes the workaround when deleting addresses included in address groups. Scope When trying to delete address objects included in address group object, terraform tries to delete the address object before removing it from a...

User Statistics

User Activity

Troubleshooting Tip: Inbound IPsec traffic dropped due to layer 2 padding

Technical Tip: MacOS FortiClient issue with SSL-VPN

Troubleshooting Tip: IPsec VPN tunnel errors due to traffic not matching selectors

Technical Tip: BGP over an Azure Vnet VPN

Technical Tip: Terraform wrong deletion order for address object included in the address group

Technical Tip: BGP prefix compared to static local...

Technical Tip: DNS error logs showing in FortiAnal...

KCS