Technical Tip: How to restrict the YouTube video c...

janonuevo · 11-18-2025

Description This article describes the behavior of the GeoIP address matching algorithm when using the local-in policy. Scope FortiGate. Solution In this example, the goal is to block local-in traffic from IP 146.70.65.160. A local-in policy is confi...

janonuevo · 10-02-2024

Description This article describes how to deal with the IKE negotiation error between FortiGate and Sonicwall. Scope FortiOS v7. Solution CLI commands: diagnose debug resetdiagnose vpn ike log filter cleardiagnose vpn ike log filter name "IPsec_Tunne...

janonuevo · 09-12-2024

Description This article describes how to restrict the YouTube video categories to 'Knowledge' exclusively. Scope FortiOS v7.4.2 and above. Solution Starting FortiOS v7.4.2, there is an implicit 'allow' rule for 'any' video categories when creating a...

janonuevo · 07-09-2024

Description This article describes how to configure Email Alert when there is a configuration change on FortiGate. Scope FortiGate. Solution Configure Email Server on FortiGate.Option 1: Using Alert Email. config alertemail setting set username sende...

janonuevo · 05-29-2024

Description This article describes how to access the FortiGate console when using a MacOS machine. Scope FortiGate, all firmware. Solution Pre-requisite: Terminal App. Open the 'Terminal' App. Run the command ls /dev/*usb*. From the output, choose th...

janonuevo · 07-08-2024

Hi mudvayne16, Try to configure a source ip for the sdwan performance sla and make sure that the source IP address is allowed on the IPsec Phase2 selector. config system sdwanconfig health-check edit <----- Health Check name. set source <----- sour...

janonuevo · 06-02-2024

Hi efernandes,Seems like the FortiAP is not getting the IP address from FGT. Please ensure that the FortiGate is configured as DHCP server and as a local NTP server on the actual physical interface that the FortiAP is connected to.You may also refer ...

janonuevo · 05-30-2024

Hi brizio71,Yes it is possible because regular policy route takes precedence over SDWAN rules.You may also refer to this link for the route lookup process:https://community.fortinet.com/t5/FortiGate/Technical-Tip-Routing-in-FortiGate-route-lookup-pro...

janonuevo · 05-28-2024

Hi tschacherl,Try to run the following commands to diagnose the issue:execute switch-controller get-conn-status Also, please make sure that fortilink is enabled on the interface:config system interfaceedit set fortilink enableendYou may also find thi...

janonuevo · 10-18-2022

This is very informative and helpful. Kudos to the Author!

User Statistics

User Activity

Troubleshooting Tip: GeoIP address matching algorithm when using a local-in policy

Troubleshooting Tip: IKE negotiation error between FortiGate and Sonicwall