Technical Tip: Unable to send FortiToken email usi...

rvillaroman · 06-20-2024

Description This article describes how to fix the error 'Session is in BLOCK state. Drop the packet'. Scope FortiGate. Solution By default, the service 'ALL' is set to use protocol type 'IP', with protocol number 0 meaning any. However, if the protoc...

rvillaroman · 06-12-2024

Description This article describes how to save changes on the Webfilter Fortiguard Categories on v7.2.8. Scope Fortigate v7.2.8. Solution When changing some FortiGuard categories on the device to alter the action on a category, it reverts to 'Allow' ...

rvillaroman · 06-02-2024

Description This article describes that Internal users cannot connect to SSL VPN when a limit access coverage to specific hosts or specific geological locations is set. Scope FortiGate. Solution Part of the SSL VPN security hardening is to limit acce...

rvillaroman · 05-24-2024

Description This article describes that reply-to option on the email server is no longer available on 7.4.4 and later. Scope Fortigate v7.4.4 and later. Solution On FortiOS 7.4.4 and later, the reply-to has been set automatically to DoNotReply@fortin...

rvillaroman · 05-23-2024

Description This article describes how to recover the previous firmware and config using the console after the FortiOS upgrade. Scope FortiGate. Solution Scenario: In some cases, after the upgrade, the device is unable to boot or unable to login. As ...

rvillaroman · 07-07-2024

Hi @martyyy, Could you check if those routes are on the database? Kindly run "get router info routing-table database" Regards,

rvillaroman · 07-07-2024

Hi @unknown1020, From the logs, you can see what is the exit interface based on the firewall policy you created for SSLVPN to WAN connection. If you are referring on the public IP being used, you could check it on the users device and use IP checking...

rvillaroman · 07-07-2024

Hi @unknown1020 , If the video became accessible by setting the tcp mss value to 1400, you may add 40 for the TCP (20) and IP (20) header. On the guide it started on 1500 which you can deduct 48, TCP header (20) + IP header (20) + ICMP packet (8).

rvillaroman · 07-07-2024

Hi @spinovski, Are you using VIP or IP pool on your setup? There is a changes on behavior per firmware branch, kindly check this article for information. https://community.fortinet.com/t5/FortiGate/Technical-Tip-IP-pool-and-virtual-IP-behavior-change...

rvillaroman · 07-07-2024

Hi @unknown1020, That is correct, you may initially try to set the value to 1400 and check if the issue persists. Regards,

User Statistics

User Activity

Troubleshooting Tip: Unable to access and get an error message of 'Session is in BLOCK state. Drop the packet'

Technical Tip: Unable to save changes on the Web filter FortiGuard Categories

Technical Tip: Unable to access SSL VPN from internal after limiting access to specific host

Technical Tip: Unable to send FortiToken email using custom smtp server starting 7.4.4

Technical Tip: Boot the backup firmware and config via console

Re: Static routes configurations not reflecting on the RIB/Routing table after upgrade to 7.4.4

Re: View "remote gateway" connections

Re: website access problems

Re: FGT-VM - Firewall policy doesn't function

Re: website access problems

Technical Tip: Unable to send FortiToken email usi...

Troubleshooting Tip: Unable to upgrade firmware, i...

Technical Tip: Restrict unauthorized access on the...

Re: Need install Forticlient VPN 7.0.7

Troubleshooting Tip: Unable to access and get an e...

Re: Need FortiClient VPN software to install 7.0.1...

KCS