Re: Forticlient IPSEC w/ SAML stuck in connecting

rahulkaushik-22 · 08-27-2024

Description This article describes how to find policy ID when logging is disabled on the policy. Scope All. Solution There are many ways to find policy IDs for traffic on FortiGate. Method 1: Policy match in the webUI and CLI. Refer to the article: U...

rahulkaushik-22 · 08-23-2024

Description This article describes how to restrict access to specific websites using the FQDN address object. Scope All. Solution Create a FQDN address object/s for the restricted websites. In this case, the restricted website is 'example.com': confi...

rahulkaushik-22 · 08-20-2024

Description This article describes how to configure an ISP as an SD-WAN member without SLA when the ISP charges for data. Scope All. Solution Configure an ISP as an SD-WAN member without SLA where the provider charges data usage. There are two servic...

rahulkaushik-22 · 08-13-2024

Description This article describes how to build a failover tunnel on the secondary WAN. Scope FortiGate. In this scenario, the site-site IPSec tunnel has been created as described in this document: Basic site-to-site VPN with pre-shared key but the t...

rahulkaushik-22 · 08-08-2024

Description This article describes how to resolve FortiSwitch communication with a RADIUS server in port-based 802.1x authentication. Scope All versions. Solution Configure port-based 802.1x authentication as shown in the article: Setting up port-bas...

rahulkaushik-22 · 10-14-2024

@Zero Create a VIP object and send the file over the Internet to check the speed difference when sent over the Internet vs SSLVPN.https://community.fortinet.com/t5/FortiGate/Technical-Tip-Virtual-IP-VIP-port-forwarding-configuration/ta-p/198143Try to...

rahulkaushik-22 · 09-09-2024

Hi @k4tamai Do you have multiple dialup IPsec tunnels on the firewall if yes then use peerid to specify the relevant tunnel with the help of aggressive mode?Refer to the article: https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-use-Pe...

rahulkaushik-22 · 07-31-2024

@LeandroMarcell If the hard reboot does not bring up the device then the device is dead. If you have support contract then open a ticket with TAC.

rahulkaushik-22 · 07-31-2024

@LeandroMarcell Take console access of the device. If the console does not work then hard reboot the firewall to see whether it will come up or not.

rahulkaushik-22 · 07-31-2024

@SRajesh1 This is IP address for captive portal authentication. It has nothing to do with Wifi SAML authentication.

User Statistics

User Activity

Technical Tip: How to find policy ID when logging is disabled on the policy

Technical Tip: How to restrict access to specific websites using the FQDN address object

Technical Tip: Configure ISP as an SD-WAN member without SLA when the ISP charges for data

Technical Tip: How to build failover tunnel on the secondary WAN

Technical Tip: How to resolve FortiSwitch communication with radius server in port based 802.1x authentication

Re: Slow FortiClient VPN