Technical Tip: Traffic getting dropped due to Mult...

ekrishnan · 06-07-2025

Description This article explains how to change the default UDP port 1646 for RADIUS account monitor to a different port. Scope FortiAuthenticator. Solution Navigate to Authentication -> RADIUS Service -> Services. Example: The port number is changed...

ekrishnan · 04-15-2025

Description This article describes how to update the SD-WAN link status through the automation stitch feature. Scope FortiGate. Solution To receive emails with CLI scripts to know the reason for the 'out of sla' trigger for a member, it is essential ...

ekrishnan · 04-06-2025

Description This article describes why the BGP neighborship failed with Cisco Router or any 3rd party device with an error rejection code stating Invalid AFI(25). Scope FortiGate Solution The behavior is observed after upgrading the FortiGate to v7.4...

ekrishnan · 02-26-2025

Description This article explains the debug and process flow of authenticating an SSL VPN user using a remote user group Scope FortiGate Solution Below is the debug flow derived from the output of the command 'sslvpnd' and 'fnbamd' and the process is...

ekrishnan · 02-07-2025

Description This article describes how to check if an IP is malicious on the FortiGuard site. Scope FortiGate, FortiGuard. Solution In this article, an example IP of 167.94.138.41 is used. Navigate to the following URL. Note the inclusion of 'engine=...

ekrishnan · 02-26-2024

Hi, You will have to disable NPU offloading in the firewall policy which is allowing this traffic in order to see a full capture. >>Further a deep analysis should be done on the capture taken on the receiving end to observe what happens before the Ke...

ekrishnan · 12-14-2023

Hello, Managed Switches which is shown on the FGT is only for Fortiswitches and non-fortinet switches will not be shown here. However you can use the Device inventory to see if other switches are detected but again you cannot manage or monitor it lik...

ekrishnan · 12-14-2023

Hello, Based on the query I believe the second policy with ISDB gets the hit because these are predefined services in the ISDB. whereas For wildcard FQDN addresses to work, the FortiGate should allow DNS traffic to pass through. Initially, the wildca...

ekrishnan · 12-04-2023

Hello @rezafathi , Yes on versions 7.4.1 this feature has been enhanced. Please find the reference link below for clarification, https://community.fortinet.com/t5/FortiGate/Technical-Tip-Maximize-SLA-Bandwidth-Load-Balancing-in-version-7/ta-p/287419 ...

ekrishnan · 11-08-2023

Hi, I believe this is a change in newer version and either you need to choose access NONE for the system config to achieve your goal, I am afraid no other way can be seen as the Feature visibility is tagged under the system config on the current vers...

User Statistics

User Activity

Technical Tip: Custom UDP port configuration for RADIUS account monitor in FortiAuthenticator

Technical Tip: SD-WAN Automation script for Member out of SLA status

Technical Tip: BGP neighborship failure after upgrading to v7.4.0 and above

Technical Tip: SSL VPN Authentication order for Remote user group using LDAP

Technical Tip: How to check malicious IP in FortiGuard

Re: Firewall not sending Keepalive packet

Re: Having none Fortinet switches in Managed Fortiswitch Topology

Re: Firewall Policy - FQDN vs Internet Service

Re: maximized Bandwidth in SDWAN

Re: About vdom user configuration backup permission

Technical Tip: Traffic getting dropped due to Mult...

Technical Tip: Special/Reserved VLAN IDs on the Fo...

Technical Tip: Checking VOIP traffic flow using Wi...

Technical Tip: Redundant IPSEC Tunnel using single...

Technical Tip: Configuration of FortiAuthenticator...

Re: maximized Bandwidth in SDWAN

KCS

User Statistics

User Activity

You are leaving our website