Fortinet Community

Description This article describes how the missing parameter 'set local-gw' under the phase1 interface can trigger issues between two IPsec endpoints. Command 'set local-gw A.B.C.D' defines the source address used for self-originated outbound IKE pac...

Description In case it is required to block ICMP Unreachable messages (Type3) due to security reasons (e.g. preventing BlackNurse attack) FortiGate administrator can use interface-policy to block ICMP type 3 messages. This article describes how to co...