Technical Tip: FortiOS packet sniffer tip

nnair · 08-29-2025

Description This article describes why peach orange is seen on the policy after making the change to the policy. Scope FortiGate. Solution If a firewall policy is highlighted in peach-orange, it indicates that the policy was recently modified, but th...

nnair · 08-26-2025

Description This article describes how the ZTNA authentication rule can be configured even with the SD-WAN. While creating the ZTNA authentication rule in the firmware version 7.2.11, an error was encountered that the entry was not found. If the inte...

nnair · 07-28-2025

Description This article describes how to configure Internet Service database objects for Adobe. Scope FortiGate. Solution To apply an Adobe ISDB object to a policy from the GUI and CLI: Navigate to the policy and objects: Create a new policy for the...

nnair · 12-26-2024

Description This article explains how to check the changes done on the GUI and can be seen on the CLI, this can be helpful during the configuration changes as well as for the audit. Scope FortiGate. Solution Run the below command on the FortiGate CLI...

nnair · 08-30-2024

Description This article describes how to change the DNS server IP address. Scope All FortiGate. Solution By default, the FortiGate will be added with the default FortiGuard server IP address on the DNS settings. FortiGuard DNS servers are used by Fo...

nnair · 07-17-2024

++ASIC offloading is disabled on respective firewall policy.This is because sessions offloaded by Network Processors (NP6, NP6Lite) will not be captured by sniffer. Note: this make cause the high cpu, to prevent cpu overutilization, create a more spe...

nnair · 10-10-2023

You can try to delete the logs and then upgrade it,execute log delete-allIf the above doesnot work, then flash format the device and upload 5.6.13 firmware and then the configuration and then upgrade it. If still not working, then you can open a tick...

nnair · 10-10-2023

You may check the below link:https://www.fortiguard.com/encyclopedia/ips/100663396

nnair · 10-10-2023

You may also check the below links:https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGuard-is-not-reachable-via-Anycast-default/ta-p/190041https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGuard-Services-are-Unreachable/ta-p...

nnair · 08-29-2023

Dear Customer,May I know on which device you are trying to remove the software inventory ?

User Statistics

User Activity

Technical Tip: Highlighted peach orange on firewall policy

Technical tip: Unable to create ZTNA authentication rule in the v7.2.11 firmware

Technical Tip: How to create ISDB for Adobe

Technical Tip: How to check the changes done in GUI via the CLI

Technical Tip: How to change the DNS server IP address

Re: Asic-Offload

Re: Upgrades FW Fortigate 30D and 30E from 5.6.13 to 6.x.x

Re: Get count of half open tcp sessions

Re: Unable to connect to fortiguard servers

Re: Remove hosts and software from Inventory

Technical Tip: FortiOS packet sniffer tip

Technical Tip: How to enable STUN protocol in poli...

Technical Tip: Highlighted peach orange on firewal...

Technical Tip: How to change the DNS server IP add...

Technical tip: Not able to see service field when ...

KCS

User Statistics

User Activity

You are leaving our website