Re: Lost internet connection when connecting SSL V...

Mrinmoy · 09-27-2024

Description This article describes how to get email notifications for new firmware releases from FortiGate. Scope FortiGate v6.4 or above Solution By creating an automation stitch, it is possible to get automated notifications from FortiGate regardin...

Mrinmoy · 09-24-2024

Description This article explains how to convert an SSL VPN from split tunnel mode to Full tunnel mode. Scope FortiGate v6.4 or later. Solution Identify the portal which is under VPN ->SSL-VPN Settings Modify the portal from 'Enabled Based on Policy ...

Mrinmoy · 09-17-2024

Description This article describes the process of converting an SSL VPN Full tunnel configuration into a split tunnel configuration. Scope FortiOS 6.4 or later. Solution For this conversion, modification is required to two parts of configuration: SSL...

Mrinmoy · 08-16-2024

Description This article describes the issue when the firewall is not coming up while upgrading the firmware. This problem may happen if the upgrade path is not followed properly or any unwanted interruption during the upgrade process. Let's consider...

Mrinmoy · 08-11-2024

Description This article describes the process of replacing the old certificate with a new one in SSL VPN settings. Scope FortiGate v6.4 or above. Solution There is two ways to accomplish this task. From GUI. Locate the new certificate. Go to VPN set...

Mrinmoy · 10-22-2024

Are you trying IPsec dialup connection? If yes, in that case, you have to use peer ID for both tunnels to work in the same time. The following article as reference.https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-use-Peer-IDs-to-selec...

Mrinmoy · 10-19-2024

You can try to force the traffic via wan2. For exampleconfig system fortiguard set interface-select-method specify set interface wan2 set source-ip 1.2.3.4end

Mrinmoy · 10-17-2024

This feature is only for Fortiget GUIhttps://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-show-hostname-in-forward-traffic-log/ta-p/218709Your syslog is receiving the raw log, IP should be resolved by that ssylog server.

Mrinmoy · 10-11-2024

I believe the problem may be related to the Kyber Support implemented in Chrome for TLS 1.3. Review the Chrome flags to verify the configuration. You can do this by navigating to "chrome://flags/#enable-tls13-kyber.". Try disabling that option and se...

Mrinmoy · 10-08-2024

If possible share a network topology and firewall config (if you have no security concern) https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/702257/configuration-backups

User Statistics

User Activity

Technical Tip: How to get email notifications for new firmware releases from FortiGate.

Technical Tip: Convert SSL VPN Split tunnel to Full tunnel

Technical Tip: Convert SSL VPN Full tunnel to Split tunnel

Troubleshooting Tip: Firewall bricked during the upgrade

Technical Tip: SSL VPN certificate replacement

Re: Assistance Needed for Dual Tunnel Setup in Transition from Windows AoVPN RRaS to Fortigate

Re: Fortigate 100F does not sync with FortiCloud

Re: How to send destination domain to remote syslog server from Fortigate?

Re: Google Chrome Kyber Issues

Re: How to allow address groups to communicate

Re: Lost internet connection when connecting SSL V...

Re: How to create device profiling rules on Fortin...

Re: FortiGate cheatsheet FortiOS 7.4

Re: FortiGate - Any way to export "Device Inventor...

Re: Setting Up 2FA for Fortigate Administration Lo...

Re: hide admin page

Re: URL for updrade the version of only google chr...

Re: To access FTP server from SSL VPN tunnel

Re: FortiGate cheatsheet FortiOS 7.4

Re: FortiGate - Any way to export "Device Inventor...

KCS