Technical Tip: Traffic getting dropped due to Mult...

ekrishnan · 02-26-2025

Description This article explains the debug and process flow of authenticating an SSL VPN user using a remote user group Scope FortiGate Solution Below is the debug flow derived from the output of the command 'sslvpnd' and 'fnbamd' and the process is...

ekrishnan · 02-07-2025

Description This article describes how to check if an IP is malicious on the FortiGuard site. Scope FortiGate, FortiGuard. Solution In this article, an example IP of 167.94.138.41 is used. Navigate to the following URL. Note the inclusion of 'engine=...

ekrishnan · 12-17-2024

Description This article describes the configuration required to assign a static Ip for an SSLVPN user. Scope FortiGate. Solution The following steps have to be followed to achieve the requirement of assigning a static IP for a particular user or hos...

ekrishnan · 11-11-2024

Description This article describes the log entry which indicates if the application control and detection has been triggered or Not. Scope FortiGate. Solution Sample Log entry: (truncated to highlight important fields) time=2016-02-02 10:43:43 .... a...

ekrishnan · 10-16-2024

Description This article explains the expected behavior on a FortiGate operating in Transparent mode after the firmware upgrade from v7.2.x or v7.0.x to v7.4.0 and v7.4.5. Scope FortiGate. Solution In earlier versions for example v7.2.x, the FortiGat...

ekrishnan · 02-26-2024

Hi, You will have to disable NPU offloading in the firewall policy which is allowing this traffic in order to see a full capture. >>Further a deep analysis should be done on the capture taken on the receiving end to observe what happens before the Ke...

ekrishnan · 12-14-2023

Hello, Managed Switches which is shown on the FGT is only for Fortiswitches and non-fortinet switches will not be shown here. However you can use the Device inventory to see if other switches are detected but again you cannot manage or monitor it lik...

ekrishnan · 12-14-2023

Hello, Based on the query I believe the second policy with ISDB gets the hit because these are predefined services in the ISDB. whereas For wildcard FQDN addresses to work, the FortiGate should allow DNS traffic to pass through. Initially, the wildca...

ekrishnan · 12-04-2023

Hello @rezafathi , Yes on versions 7.4.1 this feature has been enhanced. Please find the reference link below for clarification, https://community.fortinet.com/t5/FortiGate/Technical-Tip-Maximize-SLA-Bandwidth-Load-Balancing-in-version-7/ta-p/287419 ...

ekrishnan · 11-08-2023

Hi, I believe this is a change in newer version and either you need to choose access NONE for the system config to achieve your goal, I am afraid no other way can be seen as the Feature visibility is tagged under the system config on the current vers...

User Statistics

User Activity

Technical Tip: SSL VPN Authentication order for Remote user group using LDAP

Technical Tip: How to check malicious IP in FortiGuard

Technical Tip: Assigning Static IP for SSL VPN users

Technical Tip: Understanding Application Control log Trigger

Technical Tip: Enabling Multi-VDOM mode in Transparent mode FortiGate

Re: Firewall not sending Keepalive packet

Re: Having none Fortinet switches in Managed Fortiswitch Topology

Re: Firewall Policy - FQDN vs Internet Service

Re: maximized Bandwidth in SDWAN

Re: About vdom user configuration backup permission

Technical Tip: Traffic getting dropped due to Mult...

Technical Tip: Reserved VLAN ID : 1

Technical Tip: Redundant IPSEC Tunnel using single...

Technical Tip: Configuration of FortiAuthenticator...

Re: Having none Fortinet switches in Managed Forti...

Re: maximized Bandwidth in SDWAN

KCS

User Statistics

User Activity

You are leaving our website