Technical Tip: Blocking ICMP Unreachable Messages ...

ijeremic · 04-27-2022

Description This article describes how the missing parameter 'set local-gw' under the phase1 interface can trigger issues between two IPsec endpoints. Command 'set local-gw A.B.C.D' defines the source address used for self-originated outbound IKE pac...

ijeremic · 04-25-2022

Description This article describes how to configure FortiGate to filter ICMP type 3 messages (for the contextual sake we will block code 0, code 1, and code 3). In case it is required to block ICMP Unreachable messages (Type3) due to security reasons...

User Statistics

User Activity

Technical Tip: Missing Phase1 parameter 'set local-gw' triggers 'unknown SPI' issue