Technical Tip: FortiGate Firmware Downgrade for Mi...

jiahoong112 · 08-26-2025

Description This article describes the case when SWG with SSO authentication for FortiSASE is used, access to Microsoft 365 applications, such as Microsoft Teams, Outlook, Word, Excel, PowerPoint, etc, loses connectivity and ceases to be accessible. ...

jiahoong112 · 07-07-2025

Description This article describes how to configure split-dns for a split-tunnel IPsec dialup vpn with FortiClient on FortiGate to resolve an internal domain. Scope FortiGate v7.2, v7.4, v7.6. Solution Topology: client –internet-- FGT-kenobi –ipsec--...

jiahoong112 · 06-27-2025

Description This article describes what to do when the TS Agent FSSO users are unable to resolve DNS. Scope FortiGate v7.2, v7.4, v7.6. TS Agent. Solution Here, the TS Agent user information is present in the (# diag firewall auth list) output, TS Ag...

jiahoong112 · 05-22-2025

Description This article describes what to do when client devices behind a CGNAT network fail to connect to FortiSASE VPN. Scope FortiSASE. Solution Follow the steps in the following KB article to perform a capture using Fortinet Support Tool on Fort...

jiahoong112 · 04-01-2025

Description This article describes what is required to access internal HTTP/HTTPS resources with 'apptype web'. Agentless ZTNA Access Proxy portal is a new feature as of 7.6.1: ZTNA agentless web-based application access 7.6.1 To initiate the configu...

jiahoong112 · 09-16-2025

what version of FortiOS are you using?

jiahoong112 · 09-15-2025

Does SSH to the FortiGate work without Trusted Host configured? Is SSH Administrative Access enabled on the FortiGate's interface?

jiahoong112 · 09-15-2025

what do you mean by this? could you please provide a screenshot?

jiahoong112 · 09-15-2025

I'd suggest going for Zones in your case: https://docs.fortinet.com/document/fortigate/7.6.4/administration-guide/116821/zone If you go with Multiple Interface Policies, it can get messy very quickly. Please keep in mind that to add an ipsec tunnel t...

jiahoong112 · 09-09-2025

As you require all 4 wan link of yours to be active at the same time, they should all have the same Admin Distance but different Priority value. The smaller the Priority value, the higher the routing Priority. As you are using SDWAN, best to put all ...

User Statistics

User Activity

Technical Tip: FortiSASE SWG SSO users unable to connect/access Microsoft 365 applications Microsoft Teams, Outlook

Technical Tip: Configuring split-dns on FortiGate for split-tunnel IPsec Dialup VPN

Technical Tip: TS Agent FSSO users are not able to resolve DNS

Troubleshooting Tip: Users connecting from CGNAT network are unable to connect to FortiSASE

Technical Tip: Agentless ZTNA Access Proxy Portal unable to access internal HTTP/HTTPS resources using ‘apptype web’

Re: Tenable Vulnerability report on fortigate device

Re: SSH Fortigate blocked only for admin accounts

Re: Fortigate Policy for IPsec

Re: Fortigate Policy for IPsec

Re: How routing for underlay interfaces should be configured?

Technical Tip: FortiGate Firmware Downgrade for Mi...

Technical Tip: Using Microsoft Teams with DOS Poli...

Technical Tip: SD-WAN Best Quality (SLA) Customize...

Technical Tip: How to install FortiClient on Ubunt...

Technical Tip: Check the SSH encryption algorithm ...

Re: How to Configure Redundant IPsec Tunnels over ...

Re: FortiClient Remote Access VPN – Automatic Fail...

Re: Captive Portal in Firewall Policies

Re: How to use a different certificate instead of ...

Re: Looking for clarification on Firmware updates

KCS

User Statistics

User Activity

You are leaving our website