About jlim11

jlim11 · 05-30-2024

Description This article describes how to check the TLS version negotiated by a client machine trying to connect to an SSL VPN using FortiClient.Some FortiClient machines may experience the following error below when trying to connect: It indicates t...

jlim11 · 04-16-2024

Description This article explains why the debug error message appears when the IPsec tunnel is not going up:This issue happens while IPSEC VPN settings are properly configured, and the Physical interface is up(In this example, It is port1): Scope For...

jlim11 · 03-17-2024

Description This article describes how to test the speed of the interfaces on a FortiGate. Normally, the traffictest command on the FortiGate and an iPerf server for the speed test are used. Scope FortiGate v7.0 and above. Solution It is not possible...

jlim11 · 03-17-2024

Description This article describes SNAT network behavior when the primary and secondary interface IP address are on the same subnet. Scope FortiGate. Solution When primary or secondary interface IP addresses have different subnets, FortiOS uses the a...

jlim11 · 03-11-2024

Description This article describes how to confirm if SSL VPN connections are using DTLS. After a user connects to SSLVPN, it will be listed under 'get vpn ssl monitor'. And under 'diag firewall auth list'. But these commands will not show any informa...

User Statistics

User Activity

Technical Tip: How to check TLS Version used by FortiClient machine when trying to connect to FortiGate using SSL VPN

Troubleshooting Tip: The IPsec VPN tunnel not coming up, with debug message 'ignoring IKE request, interface is administratively down'

Technical Tip: How to perform a traffic test on a FortiGate interface that is using PPPoE as the addressing mode

Technical Tip: SNAT behavior using 'Use Outgoing Interface Address' with a primary and secondary IP address that are on the same subnet

Technical Tip:How to confirm if SSL VPN user is connected using DTLS

KCS