Technical Tip: Traffic getting dropped due to Mult...

ekrishnan · 10-10-2024

Description This article explains the configuration for the automation script to BAN the brute force attacker's IP. Scope FortiGate, SSL VPN. Solution The below image represents the elements required for this configuration: Navigate to Security Fabri...

ekrishnan · 09-13-2024

Description This article describes that the SD-WAN static route is removed when downgrading from the v7.4, v7.2 or v7.0 stream to the v6.4 stream. Scope FortiGate. Solution It is strictly recommended to upgrade the FortiGate using the Upgrade Path, b...

ekrishnan · 09-01-2024

Description This article describes an example configuration that explains the requirement to integrate FortiAuthenticator Cloud as Radius server for FortiGate. Scope FortiGate, FortiTrust Identity. Solution Setup: FortiGate---------->Internet----->Fo...

ekrishnan · 08-12-2024

Description This article describes how to add multiple FortiGates behind a NAT device (router or upstream FortiGate) to the FortiManager using the upstream device's Public IP. Scope FortiGate, FortiManager. Solution The setup is as per below: FGT1 --...

ekrishnan · 08-08-2024

Description This article describes instances where sometimes when running debugs for example (SSL VPN, fnbamd, IPsec, etc) there is no output displayed. Scope FortiGate CLI. Solution This issue is more into the CLI debug session and it will display s...

ekrishnan · 02-26-2024

Hi, You will have to disable NPU offloading in the firewall policy which is allowing this traffic in order to see a full capture. >>Further a deep analysis should be done on the capture taken on the receiving end to observe what happens before the Ke...

ekrishnan · 12-14-2023

Hello, Managed Switches which is shown on the FGT is only for Fortiswitches and non-fortinet switches will not be shown here. However you can use the Device inventory to see if other switches are detected but again you cannot manage or monitor it lik...

ekrishnan · 12-14-2023

Hello, Based on the query I believe the second policy with ISDB gets the hit because these are predefined services in the ISDB. whereas For wildcard FQDN addresses to work, the FortiGate should allow DNS traffic to pass through. Initially, the wildca...

ekrishnan · 12-04-2023

Hello @rezafathi , Yes on versions 7.4.1 this feature has been enhanced. Please find the reference link below for clarification, https://community.fortinet.com/t5/FortiGate/Technical-Tip-Maximize-SLA-Bandwidth-Load-Balancing-in-version-7/ta-p/287419 ...

ekrishnan · 11-08-2023

Hi, I believe this is a change in newer version and either you need to choose access NONE for the system config to achieve your goal, I am afraid no other way can be seen as the Feature visibility is tagged under the system config on the current vers...

User Statistics

User Activity

Technical Tip: Automation script to BAN Brute Force attacker IP for SSL VPN

Technical Tip: SD-WAN static route is removed when downgrading from v7.2 version stream to the 6.4 version stream

Technical Tip: Configuration of FortiAuthenticator Cloud (Fortitrust Identity) as Radius server with FortiGate

Technical Tip: Adding Multiple FortiGate to FortiManager using the same Public IP

Technical Tip: The debug application is not showing any output (diagnose debug application)

Re: Firewall not sending Keepalive packet

Re: Having none Fortinet switches in Managed Fortiswitch Topology

Re: Firewall Policy - FQDN vs Internet Service

Re: maximized Bandwidth in SDWAN

Re: About vdom user configuration backup permission

Technical Tip: Traffic getting dropped due to Mult...

Technical Tip: Reserved VLAN ID : 1

Technical Tip: Redundant IPSEC Tunnel using single...

Technical Tip: Configuration of FortiAuthenticator...

Re: Having none Fortinet switches in Managed Forti...

Re: maximized Bandwidth in SDWAN

KCS