Technical Tip: Assigning Priority to SD WAN Member...

pjang · 10-03-2024

Description This article describes a known-issue with firewall object synchronization in the Fortinet Security Fabric. Admins may notice the following symptoms related to this issue: FortiGates in the Security Fabric will display a warning indicating...

pjang · 09-26-2024

Description This article describes the pros and cons of using the 'any' option for the Virtual IP (VIP) Interface setting (aka extintf in the CLI), including scenarios where it can be useful as well as potential behavioral pitfalls to be aware of. Sc...

pjang · 09-26-2024

Description This article describes a known issue with the SFP+ interfaces (specifically port9 through port24) on the FortiGate-1000F/1001F model. This issue does not affect the SFP28 interfaces (port25 through port32), nor does it affect the QSFP28 i...

pjang · 09-25-2024

Description This article describes the behavior of the Trusted Hosts feature and how it interacts with Single Sign-On (SSO) Administrators on the FortiGate. Scope FortiGate, SAML. Solution First, a primer regarding key behaviors of Trusted Hosts and ...

pjang · 09-19-2024

Description This article describes a known behavior where TCP port 4500 will always appear when performing network port scans on the FortiGate. Note that this article applies to FortiGates that are running FortiOS 7.4.2+ and that also have at least o...

pjang · 01-15-2024

Hi Faiza_Emam_Delhi, can you clarify where (FortiGate, FortiSwitch directly, FortiManager, etc.) and on what firmware you were able to perform these steps? I checked on FortiOS 6.4, 7.0, 7.2, and 7.4, and none of them have the capability that you are...

pjang · 08-11-2022

I recommend checking out these Community KB articles for SSL-VPN and IPsec:https://community.fortinet.com/t5/FortiGate/Technical-Tip-Enabling-split-tunnel-feature-for-SSL-VPN/ta-p/198108https://community.fortinet.com/t5/FortiGate/Technical-Tip-Enable...

pjang · 04-22-2022

Unless I'm missing something, it looks to me like Source NAT isn't turned on for Policy 15, the SSL-VPN to Internet policy.You're using a full-tunnel SSL-VPN (set split-tunneling disable), so all traffic is shuttled over the VPN in this case, but you...

User Statistics

User Activity

Technical Tip: FortiGate Security Fabric is unable to show Firewall Objects in conflict (Known Issue)

Technical Tip: Pros and Cons of using 'any' for Virtual IP Interface versus a specific interface

Technical Tip: SFP+ interface LEDs are not illuminated and Speed shows as 10Mbps on the FortiGate-1000F/1001F (Known Issue)

Technical Tip: How Trusted Hosts work with SSO Admin accounts on the FortiGate

Technical Tip: Network scans show TCP 4500 on the FortiGate even when ike-tcp-port is modified (7.4 and later)

Re: How to export a fortiswitch configuration in table format (expecially port assignments)?

Re: Split Tunnel

Re: SSLVPN no outbound access

Technical Tip: Assigning Priority to SD WAN Member...

Technical Tip: Configuring SSL-VPN to allow tunnel...

Technical Tip: FortiGate Cloud Remote Access funct...

Technical Tip: How to block access to IPFS (InterP...

Technical Tip: Hardware acceleration on the FortiG...

Re: SSLVPN no outbound access

KCS