Technical Tip: Traffic getting dropped due to Mult...

ekrishnan · 04-04-2024

Description This article explains on the configuration of SSLVPN in an multiple ISP scenario and allocation of different IP pool assignments for the users when using this different ISPs to establish the sslvpn connection. Scope Fortigate, SSL VPN. So...

ekrishnan · 03-10-2024

Description This article describes how to allow an SSL VPN listening port in a policy-based NGFW Mode. Scope FortiGate, Central SNAT, Policy-Based NGFW Mode. Solution In Policy Based FortiGate, to allow SSL VPN listening port the SSL Inspection and A...

ekrishnan · 01-31-2024

Description This article describes how IPSEC peer (remote site) can access the Server in the local FortiGate which is located in LAN using Public IP which is not associated anywhere in the local FortiGate. Scope FortiGate. Solution In this setup 2 Fo...

ekrishnan · 01-07-2024

Description This article describes how to delete the sub-vlan interface created under one of the VLANs from FortiLink specifically the NAC VLAN. Scope FortiSwitch, FortiGate. Solution As per the below screenshot, the requirement is to delete the 'DAT...

ekrishnan · 12-03-2023

Description This article explains the feature change of SD-WAN Load Balancing in version 7.4.1 and above compared to the previous versions. Scope FortiGate. Solution In previous versions, the load balancing on SD-WAN rules was done only by the MAXIMI...

ekrishnan · 02-26-2024

Hi, You will have to disable NPU offloading in the firewall policy which is allowing this traffic in order to see a full capture. >>Further a deep analysis should be done on the capture taken on the receiving end to observe what happens before the Ke...

ekrishnan · 12-14-2023

Hello, Managed Switches which is shown on the FGT is only for Fortiswitches and non-fortinet switches will not be shown here. However you can use the Device inventory to see if other switches are detected but again you cannot manage or monitor it lik...

ekrishnan · 12-14-2023

Hello, Based on the query I believe the second policy with ISDB gets the hit because these are predefined services in the ISDB. whereas For wildcard FQDN addresses to work, the FortiGate should allow DNS traffic to pass through. Initially, the wildca...

ekrishnan · 12-04-2023

Hello @rezafathi , Yes on versions 7.4.1 this feature has been enhanced. Please find the reference link below for clarification, https://community.fortinet.com/t5/FortiGate/Technical-Tip-Maximize-SLA-Bandwidth-Load-Balancing-in-version-7/ta-p/287419 ...

ekrishnan · 11-08-2023

Hi, I believe this is a change in newer version and either you need to choose access NONE for the system config to achieve your goal, I am afraid no other way can be seen as the Feature visibility is tagged under the system config on the current vers...

User Statistics

User Activity

Technical Tip: SSL VPN connection using Multiple ISPs and IP allocation from different IP pools

Technical Tip: SSL VPN listening Port enablement in FortiGate with Policy Based NGFW Mode

Technical Tip: Configuring Hairpin NAT using IPSEC and BGP

Technical Tip: Removing sub-vlan interface created under one of the VLAN from FortiLink

Technical Tip: Maximize SLA Bandwidth (Load Balancing) in version 7.4.1 and above (SD-WAN rule Strategy)

Re: Firewall not sending Keepalive packet

Re: Having none Fortinet switches in Managed Fortiswitch Topology

Re: Firewall Policy - FQDN vs Internet Service

Re: maximized Bandwidth in SDWAN

Re: About vdom user configuration backup permission

Technical Tip: Traffic getting dropped due to Mult...

Technical Tip: Reserved VLAN ID : 1

Re: Having none Fortinet switches in Managed Forti...

Technical Tip: Redundant IPSEC Tunnel using single...

Technical Tip: Working of Link Monitor ICMP probin...

Re: maximized Bandwidth in SDWAN

KCS