Description This article describes how to allow IPsec VPN port 4500,500
and ESP protocol access to specific IP addresses only. Scope FortiGate.
Solution For Instance: IPsec VPN site to site with the remote peer of
10.10.10.1 which opened IKE port 500...
Description This article describes steps to troubleshoot VRRP split
brain, where both master node and slave node shows as 'Master'. Given
the VRRP configuration on both sides of the FortiGates are legitimate.
Scope FortiGate, all firmware Solution In...
Description This article describes about the issue where user is unable
to add a hardware switch which is in use into a zone. Scope FortiGate,
all firmware. Solution Adding hardware switch interface, or any
interface as follows in a newly created zon...
Description This article describes about the issue where users are
unable to ping public servers (for testing) using ping-option source
from LAN interface. Scope FortiGate, all Firmware. Solution Consider the
following network, where the LAN facing i...
Description This article describes about security fabric connection
failing over IPSec tunnel. Scope FortiGate, all firmware. Solution
Follow the below troubleshooting steps: 1) Make sure tunnel is up and
running with traffic on both sides of the tun...
DHCPv6 stateful server Similar to a DHCPv4 server, a DHCPv6 server is
stateful. It can track client/server states, assign IP addresses to
clients, and maintain full control over the process. In addition to
assigning IP addresses, a DHCP server can al...
Hello, Yes, that is true and we will no longer be able to configure ssl
vpn web mode as there are potential challenge with SSL VPN Web Mode when
it comes to handling modern websites. The newest websites frequently
depend on dynamic languages, which c...
Hello, Can you confirm if your fortiguard servers are reachable or are
you seeing Fortiguard servers failed to connect in your notification ?
config system fortiguard set fortiguard-anycast disable set protocol udp
set port 8888 set sdns-server-ip 20...
Hello MohamedFawzi, This article explains the 'unable to get VPN tunnel
IP address (-30)' error and the solution while using Forticlient SSL VPN
as the tool.
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Unable-to-receive-VPN-tunnel-IP-ad...
Hello, When entering a command, the CLI requires that you use valid
syntax and conform to expected input constraints. It will reject invalid
commands. For example, if you do not type the entire object that will
receive the action of a command operato...