Troubleshooting Tip: Possible reasons for FortiCli...

sjoshi · 05-11-2025

Description This article describes how to set up and maintain an IKEv2 Site-to-Site IPsec VPN between a FortiGate and StrongSwan on Ubuntu Linux. Scope FortiGate. Solution Once the configuration is complete, the VPN tunnel may not establish as expect...

sjoshi · 05-11-2025

Description This article describes how to configure an IKEv1 site-to-site VPN tunnel between a FortiGate and a StrongSwan VPN gateway on a Linux system. Scope FortiGate. Solution On Linux Install StrongSwan: sudo apt-get updatesudo apt-get install st...

sjoshi · 04-27-2025

Description This article describes an issue observed on FortiGate, where the ipv4-split-include setting in an IPsec Phase1-interface configuration disappears after modifying the associated address group. Although the configuration appears intact via ...

sjoshi · 04-22-2025

Description This article describes the error 'AADSTS76023: The signature of the received authentication request is invalid, please contact the administrator to resolve the issue' when connecting to the FortiSASE VPN. Scope FortiSASE. Solution The use...

sjoshi · 04-16-2025

Description This article describes the common issues encountered when uploading FortiConverter-generated configuration file to FortiGate devices, and provides a step-by-step approach to troubleshoot and resolve these problems effectively. Scope Forti...

sjoshi · 05-17-2025

Hi, yes it can be done using sdwan and if sdwan is not setup and policy route can be used Refer:- https://docs.fortinet.com/document/fortigate/7.6.2/administration-guide/413288/sd-wan-rules-overview https://community.fortinet.com/t5/FortiGate/Technic...

sjoshi · 05-12-2025

Hi, In fortinet if you want to communicate among the different interface then you need to setup firewall policy. Please create firewall policy from port3 to port1 and port2 and vice versa and allowed the required subnet. Refer:- https://docs.fortinet...

sjoshi · 05-11-2025

Hi, Take packet capture on ether frames. diagnose sniffer packet any 'ether proto 0x8890' 6 0 l Refer:- https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-HA-Heartbeat-packet-Ethertypes/ta-p/197807

sjoshi · 05-10-2025

Hi , Its better to reach out to fortinet NSE training team and raise a ticket with them so that you can get better clarity. https://helpdesk.training.fortinet.com/support/solutions/articles/73000571109-recertification Sign in and can raise the ticket

sjoshi · 05-10-2025

Hi demein, If you have not setup port forwarding under VIP config even the outbound traffic takes the external IP of the VIP but it is better to setup the sdwan rule so that you have the control to route the traffic for specific source towards specif...

User Statistics

User Activity

Troubleshooting Tip: Troubleshooting IKEv2 Site-to-Site VPN Between FortiGate and StrongSwan on Ubuntu

Technical Tip: FortiGate IKEv1 VPN Setup with StrongSwan on Linux

Troubleshooting Tip: ipv4-split-include setting Disappears When Editing Address Group in IPsec VPN

Troubleshooting Tip: Resolving VPN Connectivity Issues with Azure Active Directory Integration

Troubleshooting Tip: Troubleshooting FortiConverter Script Upload Issues: A Step-by-Step Guide

Re: Fortigate

Re: Fortigate ping is not responding if subnet is directly connected

Re: UDP port 730 unreachable

Re: FCA and FCF recertification

Re: How to direct outbound mail (from mail server) to a certain WAN port?

Troubleshooting Tip: Possible reasons for FortiCli...

Technical Tip: Allow the communication between end...

Troubleshooting Tip: Resolving 'Invalid Number' Er...

Troubleshooting Tip: Unable to Subscribe to FortiS...

Troubleshooting Tip: Captive Portal error 'The str...

Re: FortiSASE ZTNA Shortcuts config with SMAL Auth...

Re: Site to site vpn with branch behind a firewall

Re: FortiSASE VPN connection issue

Re: Fortinet DPI

Re: FortiSASE SWG setup

FortiGate-VM on Azure

KCS

FortiGate-VM on AWS

Fortinet Training Institute

Engage Services

User Statistics

User Activity

You are leaving our website