Troubleshooting Tip: Possible reasons for FortiCli...

sjoshi · 09-09-2024

Description This article describes an issue where a FortiSASE user is unable to match the correct user group due to a mismatch between the user group configuration in Azure and FortiGate Scope FortiSASE Solution Let's say user's internet access was n...

sjoshi · 09-08-2024

Description This article describes how to secure FortiSASE with SAML-based SSL VPN, using Azure Active Directory as the Identity Provider. It covers the step-by-step process of integrating Azure AD with FortiSASE, ensuring secure remote access throug...

sjoshi · 09-05-2024

Description This article describes how to fix the 'Entry Not Found' error when selecting a 2FA authentication scheme in FortiGate's ZTNA SaaS-based access proxy configuration Scope FortiGate. Solution The requirement is to set up 2FA when accessing Z...

sjoshi · 09-05-2024

Description This article details the implementation of Zero Trust Network Access (ZTNA) for SaaS applications using RADIUS authentication Scope FortiGate. Solution Once the ZTNA access proxy configuration for SaaS access is complete, the next step is...

sjoshi · 09-04-2024

Description This article describes a behavior where only the Webex SaaS application was intended to route through a ZTNA proxy configured on a FortiGate and Forticlient EMS, but traffic from www.google.com, was also being redirected. Scope FortiGate,...

sjoshi · 08-28-2024

Dear onebox-tech, To configure AWS Direct Connect on a FortiGate 90G, create a VLAN interface on the FortiGate corresponding to the VLAN ID provided by AWS, configure BGP with AWS's ASN (7224) and your IP prefixes, set up static routes to direct traf...

sjoshi · 01-02-2024

Hi farcas, Currently in FortiSase traffic is only one way. Client connected to fortisase via vpn towards internet >> SIA Client connected to fortisase via vpn towards private NW behind hub FGT >> SPA Also the concept is same even in agentless mode.

sjoshi · 11-22-2023

Hi ibnet, You can also have a look in below article along with preserve-session-route enable settings https://community.fortinet.com/t5/FortiGate/Technical-Tip-Using-SNAT-route-change-to-update-existing-NAT/ta-p/198439

sjoshi · 11-22-2023

Dear nethan, You can take a pcap on the FGT and verify it on wireshark. Also verify is the ssl deep inspection cert is install on the user PC. https://community.fortinet.com/t5/FortiGate/Technical-Tip-Extended-logging-for-SSL-traffic/ta-p/202112

sjoshi · 10-12-2023

Dear Umesh, You can follow the below article where it has mentioned about each feature of fortigate https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/954635/getting-started

User Statistics

User Activity

Troubleshooting Tip: FortiSASE User Not Matching Correct Group in Azure Integration: Resolving sAMAccountName vs. Group ID Mismatch

Technical Tip: Securing FortiSASE with SAML SSL VPN: Azure AD as the Identity Provider

Troubleshooting Tip: Fixing 'Entry Not Found' Errors When Configuring 2FA Authentication Schemes in FortiGate ZTNA Access Proxy

Technical Tip: Implementing ZTNA for SaaS Applications with RADIUS Authentication

Technical Tip: Unintended Traffic Routing: Resolving ZTNA Saas Based application Access Proxy Issues with Webex and Other SaaS Applications

Re: Fortigate 90G Configuration for AWS Direct Connect.

Re: FortiSASE roadblock

Re: SD-WAN load balancing breaks sessions

Re: Office 365 ADFS login with SSL deep inspection fails after 7.0.13 upgrade

Re: Fortigate Firewall 1200D implementation guide

Troubleshooting Tip: Possible reasons for FortiCli...

Troubleshooting Tip: Captive Portal error 'The str...

Technical Tip: Firewall Policy error 'Object check...

Technical Tip: How to setup LACP between FortiGate...

Technical Tip: Allow the communication between end...

Re: SSL VPN Connection and Subnets

Re: migrate fortigate 501f to 601f

Re: SSL-VPN Schedule problem

Re: Fortinet DNS Servers

Re: How many ports out of the box?

KCS

Fortinet Training Institute