Re: Forticlient IPSEC w/ SAML stuck in connecting

tpatel · 01-15-2025

Description This article describes how to check FortiGate upgrade events in system event logs. Scope FortiGate. Solution It is possible to filter the log to check when FortiGate is getting upgraded. From GUI, go to Logs & Reports -> System Events -> ...

tpatel · 01-10-2025

Description This article describes how to resolve the issue of SSL VPN if a user cannot connect to SSL VPN after accepting MFA with SAML MFA on Azure Entra. Scope FortiGate. Solution SAML server is configured on FortiGate. The user is getting an erro...

tpatel · 12-26-2024

Description This article describes how to verify the traffic is being inspected by FortiGate when the firewall policy is set to proxy-based inspection using deep inspection. Scope FortiGate. Solution Firewall policy Configuration: config firewall pol...

tpatel · 12-11-2024

Description This article describes how to send logs to FortiManager when the FortiAnalyzer feature is enabled on FortiManager. Scope FortiGate. Solution FortiManager can also act as a logging and reporting device. FortiManager requires additional res...

tpatel · 11-21-2024

Description This article describes how to troubleshoot issues where traffic is getting denied by an SNAT IP pool check. Scope FortiGate. Solution Central SNAT is enabled on FortiGate. All traffic passing from FortiGate is source NAT using central SNA...

tpatel · 11-15-2024

Hello, Can you please try enter code manually, like when you click on token you are able to see code. check entering token manually work or not.

tpatel · 11-09-2024

Hello Alex, For acme certificate port 443 and port 80 is going to be used so if vip is configured for port 443 or 80 then all traffic is going to dnat using vip which is going cause issue for acme. Not for all VIP but with vip which is created using ...

tpatel · 11-02-2024

In sslvpn to lan policy specify fortigate lan interface subnet as destination so only fortigate lab subnet traffic will route over ssl vpn.

tpatel · 11-01-2024

Hello Jab, Have you configured ippool ip address as secondary ip address on wan interface ? Can you please try to assigned ip address as secondary ip address on interface and try to ping.https://community.fortinet.com/t5/FortiGate/Technical-Tip-Set-a...

tpatel · 10-31-2024

Hello Julian, It look correct configuration, as you have mention ra-giaadr as loopback ip address so you will also get a ip according to that scope. Also checked connectivity between loopback address to dhcp server like ping from loopback to dhcp ser...

User Statistics

User Activity

Technical Tip: How to check FortiGate upgrade events logs

Troubleshooting Tip: Cannot login to VPN after accepting MFA with the SAML SSO on Azure Entra debug error 'SSLVPN configuration is wrong. (-7200)'

Troubleshooting Tip: How to evaluate traffic is getting SSL inspected in WAD debug.

Technical Tip: How to configure FortiGate to send syslog to FortiManager

Troubleshooting Tip: Traffic is getting denied by SNAT IP pool check

Re: Can't access Forticloud by Fortitoken Mobile validation failed.

Re: ACME Clarification

Re: SSL VPN is not doing split tunnel

Re: can´t ping ippool from cli @120G 7.2.9 - works fine @80F 7.2.9

Re: FortiGate SSL VPN with External DHCP Server

Re: Forticlient IPSEC w/ SAML stuck in connecting

Re: Access to Fortigates, to mgmt IP addresses, fr...

Re: Your connection is not private in Google Chrom...

Re: FSSO with FortiAuthenticator

Re: FortiGate SSL VPN with External DHCP Server

Re: FortiGate SSL VPN with External DHCP Server

Re: Multiple VRF Aware Remote Access SSL VPN Tunne...

KCS

User Statistics

User Activity

You are leaving our website