Description This article explains in which scenarios FortiCarrier can
drop GTP packets with deny_cause=packet-sanity. Each GTP packet is
validated against 3GPP standards, and if it fails any mandatory checks,
it may be dropped. Only packets that fail...
Description This article describes the conditions under which FortiGate
may deny a GTP packet with the log message deny_cause:
invalid-msg-length.It explains how FortiCarrier checks the GTP length
field and message size, and outlines the common scena...
Description This article describes how half-open and half-close timeouts
work for GTP tunnels on a FortiCarrier, helping manage tunnel
lifecycles. Scope FortiCarrier. Solution How half-open and half-close
States are created: When FortiCarrier receive...
Description This article describes how to a handle an issue where, when
a CGN-type IP pool is configured with overload enabled in a FortiGate
using the Hyperscale License, incorrect ippool session statistics can be
observed. Specifically, UDP session...
Description This article describes that using FSSO, it is quite
straightforward to use AD groups in policies, however, sometimes it is
needed to permit only specific users rather than the whole AD group.
This article will explain how to achieve it. S...