Technical Tip: How to read SAML Debug output

mgoswami · 10-04-2023

Description This article describes how to read SAML logs with the output obtained from the following commands: diag debug application samld -1diag debug enable Scope FortiGate. Solution This article uses SAML login as an example. Once the user enters...

mgoswami · 08-23-2023

Description This article describes how to allow Gmail or Yahoo Mail while blocking the upload of any attachments. Scope FortiGate 6.4, 7.0+. Solution This can be achieved using the Application Control Security Profile.Below are the signatures which c...

mgoswami · 08-20-2023

Description This article explains how to force sessions to keep using the outgoing interface and gateway after a route change. The reevaluation of a dirty session following a route change may result in a failover to another SD-WAN member. If the SD-W...

mgoswami · 07-28-2023

Description This article describes an issue where FSSO CA overrides an actual logon event with the Outlook email event when a user has Outlook set up with two email accounts. A solution is offered. Scope FortiGate. Solution If user 'A' logs on to the...

mgoswami · 06-02-2023

Description This article describes the behaviour and benefits of packet duplication with SD-WAN Scope FortiGate. Solution Packet duplication is an SD-WAN feature to reduce data loss over any underlay and overlay SD-WAN. It enables the sending of dupl...

mgoswami · 01-04-2024

Hi, Yes the above mentioned steps are correct. Additionally, you may also refer to these links for any configuration in NAT mode and Transparent Mode VDOM:https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-create-VDOM-with-Transparent-m...

mgoswami · 01-04-2024

Hi, Here are some of the key features of Fortimanager:https://help.fortinet.com/fmgr/50hlp/56/5-6-1/FortiManager_Admin_Guide/0300_FMG_architecture/0400_Key%20features+.htm

mgoswami · 10-13-2023

Hi, If you have disabled Split Tunneling for SSL VPN, in that case, on the Policy which you have created for the SSL VPN users to access Internet, you would need to call the SAML USER GROUP. This group will be for the non gallery application which yo...

mgoswami · 10-12-2023

Hi, You may login to your training portal and go to your Profile. You will see the certificate there. BR, Manosh

mgoswami · 10-05-2023

Hi Slouw, I understand that you are not able to add the WAN interface to your SD-WAN Zone in Fortigate from GUI. Please refer to this link and try to add it from the CLI and let us know if that works:https://docs.fortinet.com/document/fortigate/7.4.1...

User Statistics

User Activity

Technical Tip: How to read SAML Debug output

Technical Tip: Allow Gmail or Yahoo Mail, but block attachment uploads

Technical Tip: Interface Stickiness for SD-WAN

Troubleshooting Tip: FSSO overrides logon event with outlook login

Technical Tip: Packet duplication in SD-WAN

Re: Change Fortigate VDOM from Transparent to NAT

Re: What are the benefits of Fortimanager ?

Re: Fortigate Azure AD as a SAML IdP for outbound firewall rule and SAML SSO login for SSL VPN

Re: Fortinet NSE 4 certification

Re: Unable to add my active ISP WAN interface as SD_WAN Member to a SD_ZONE - Part 2

Technical Tip: How to read SAML Debug output

Re: Fortinet NSE 4 certification

Re: The VPN server is not reachable.

Re: Forticlient Disconnects

Technical Tip: Inspection mode option is not visib...

Re: Change Fortigate VDOM from Transparent to NAT

Re: My SSL VPN RDP connection bookmark closes

Re: Restrict Access to the Firewall WAN Interface ...

Re: Redundant IPsec tunnel stays up even if peer i...

Re: Restrict Access to the Firewall WAN Interface ...

KCS