Fortinet Community

Renante_Era · 12-01-2023

Description This article describes how to resolve an authentication issue when FortiGate is authenticating through RADIUS NPS with Microsoft Entra multifactor Authentication via Azure. Scope FortiGate 7.2+ Solution There are several instances where a...

Renante_Era · 11-29-2023

Description This article lists the settings that are not synchronized in standalone configuration synchronization of FGSP. Scope FortiGate FortiOS 7.2+ Solution When FGSP is used, the following are synchronized between peers: Policies Objects Users S...

Renante_Era · 11-29-2023

Description This article describes a list of the commands when encountering a ZTNA tagging issue that involves FortiGate, EMS, and FortiClient. Scope FortiGate FortiOS 7.0.12+.EMS version - 7.0.7+.FortiClient version7.0.7+. Solution On the FortiGate:...

Renante_Era · 11-21-2023

Description This article describes how to troubleshoot when one host or client computer is unable to communicate with another host or server. Scope FortiGate v7.0+. Solution Case: Endpoint is unable to access the gateway. Check if there are physical ...

Renante_Era · 11-21-2023

Description This article describes some guidelines to follow before a problem occurs. Scope FortiGate. Solution Diagnosing the FortiGate to identify abnormal behavior is difficult unless the baseline is known or what is a relatively normal operating ...

Renante_Era · 11-21-2023

The remote subnets are different so I'm not entirely sure why you need to configure DNAT like that. But anyway, I I tried similar command on my FGT (FortiOS 7.2.6) and it's working: config firewall vipedit "Prod_server_1"set extip 10.50.1.1set mapped...

Renante_Era · 11-21-2023

You can confirm the command options using: di traffictest ? If that didn't work, you are probably using a vdom so type: end config vdom edit ? <--- list vdom name edit <-- case sensitive Furthermore, di traffictest run -c -p 5201 is for client uplo...

Renante_Era · 11-21-2023

Try # di traffictest ?The output on 7.2.6 are as follows: show Traffic settings showrun Start traffic.server-intf Server interface.client-intf Client interface.port TCP or UDP port number (1 - 65535).proto 0 for TCP or 1 for UDP (default = 0) Client ...

Renante_Era · 11-21-2023

As I understand, you want to share the public address between VDOMs. There are several ways, but meshed VDOMs provides the most flexibility. I recommend that you create an account at training.fortinet.com. Next, click Library>FCP Network Security>For...

Fortinet Community

User Statistics

User Activity

Troubleshooting Tip: Failed authentication when connecting to RADIUS NPS with Microsoft NPS extension for Azure MFA

Technical Tip: Settings that are not synchronized when using standalone configuration synchronization in FortiGate Session Life Support Protocol (FGSP)

Troubleshooting Tip: ZTNA tagging issue debugging commands

Troubleshooting Tip: Packet logic analysis when a host is unable to access the FortiGate

Technical Tip: Gather the FortiGate baseline before a problem occurs

Re: Source NAT with miltiple IPsec using the same local lange

Re: diagnose traffictest on a Fortigate 600F with 6.4.14 - not the same as on a 60F/100F?

Re: diagnose traffictest on a Fortigate 600F with 6.4.14?

Re: vdom implementation - concept and problems

KCS