Technical Tip: Configure IPsec VPN with SD-WAN

vsahu · 10-09-2023

Description This article describes situations where receiving vulnerability reports indicating that devices such as FortiGate, FortiAnalyzer, FortiManager, etc., are susceptible to specific CVEs (Common Vulnerabilities and Exposures). This guide aims...

vsahu · 08-24-2023

Description This article describes how to use scripts to monitor a FortiGate that is suffering from high CPU or high memory usage. If the device goes into conserve mode or high CPU, the logs obtained will help isolate the issue when shared with TAC. ...

vsahu · 06-21-2023

Description This article describes how to set the threat weight and how it is calculated. Scope FortiGate v6.0.0 onwards. Solution Where to define threat score: In the threat weight configuration, we can define the level and score for the level as pe...

vsahu · 05-11-2023

Description This article describes how to configure options 60, 66, and 67 in DHCP server configuration in FortiGate. Scope FortiGate. Solution The Dynamic Host Configuration Protocol (DHCP) options provide desired parameters (TCP/IP stack) to be pus...

vsahu · 04-25-2023

Description This article describes the case when there are multiple domain machines in the network and it is wanted to use the host-check feature to do the domain name check for an SSL VPN connection. Machine A - domain abc. Machine B - domain bcd. S...

vsahu · 12-29-2023

Hello Fox, Auto Discovery VPN (ADVPN) is a Fortinet proprietary protocol. This is pretty much the same concept as DMVPN but available only on FortiGates, If you're configuring a normal VPN it will work as expected but ADVPN will not work as being a F...

vsahu · 09-06-2023

There's a known issue with 7.0.7 macOS forticlient 805201, it is fixed in 7.2.0 and laterhttps://docs.fortinet.com/document/forticlient/7.0.7/macos-release-notes/124818/known-issues Let me know which forticlient version you're using.

vsahu · 09-06-2023

Hello alaaelrayes,Can you share the endpoint tag snapshot from the client and the ZTNA policy that you've configured on the FortiGate?

vsahu · 09-06-2023

Hello Sintara,As per your description, it seems like an unwanted behavior / bug as it's giving different results with different versions, I tried to check known issues but there seems to be none pointing towards it, It's better you raise a technical ...

vsahu · 09-06-2023

Hello Adem_netsys, can you share the snapshot of the config to which you're referring?

User Statistics

User Activity

Technical Tip: CVE lookup and other important features in FortiGuard Labs

Troubleshooting Tip: High memory and High CPU general script using Tera Term

Technical Tip: Threat Weight or Threat Score calculation Fortigate

Technical Tip: Configure DHCP option 60, 66 and 67 FortiGate

Technical Tip: Multiple Domain machines in network using Host-check connecting via SSL VPN

Re: Fortigate Hub-Spoke compatibility

Re: ZTNA policy issue on Mac's devices

Re: ZTNA policy issue on Mac's devices

Re: Message ID Field in log

Re: Report Source IP

Technical Tip: Configure IPsec VPN with SD-WAN

Re: "Adding Route in Windows After Connection via ...

Re: SD-WAN interfaces not showing in firewall-poli...

Technical Tip: FortiGate HTTPS/SSL Certificate Ins...

Technical Tip: CVE lookup and other important feat...

Re: SD-WAN interfaces not showing in firewall-poli...

Re: help with iperf and 'a' interface

Re: FortiAP FAP-221E (used) already registred?

Re: Difference between GET" and "SHOW" commands ??

Re: SD-WAN with NAT64 on (non IPv6 capable) backup...

KCS