Re: Forticlient IPSEC w/ SAML stuck in connecting

tpatel · 12-11-2024

Description This article describes how to send logs to FortiManager when the FortiAnalyzer feature is enabled on FortiManager. Scope FortiGate. Solution FortiManager can also act as a logging and reporting device. FortiManager requires additional res...

tpatel · 11-21-2024

Description This article describes how to troubleshoot issues where traffic is getting denied by an SNAT IP pool check. Scope FortiGate. Solution Central SNAT is enabled on FortiGate. All traffic passing from FortiGate is source NAT using central SNA...

tpatel · 10-26-2024

Description This article describes how to capture local intra-zone traffic logs when intra-zone traffic is set allow. Scope Fortigate Solution Lan port 2 and port 4 are part of the intra-zone. Both interfaces are used for local traffic. Configuration...

tpatel · 10-14-2024

Description This article describes how to troubleshoot when the admin user cannot see the checksum of all VDOMs when HA is out of sync. Scope FortiGate. Solution The admin user can only see 2 VDOM checksums with global checksum. Run the Checksum comm...

tpatel · 09-19-2024

Description This article describes how to check OSPF advertised and received routes on a FortiGate. Scope FortiOS. Solution Topology: Advertised connected route over OSPF. OSPF Configuration through CLI. Fortigate1 OSPF configuration. 192.168.80.2 is...

tpatel · 11-15-2024

Hello, Can you please try enter code manually, like when you click on token you are able to see code. check entering token manually work or not.

tpatel · 11-09-2024

Hello Alex, For acme certificate port 443 and port 80 is going to be used so if vip is configured for port 443 or 80 then all traffic is going to dnat using vip which is going cause issue for acme. Not for all VIP but with vip which is created using ...

tpatel · 11-02-2024

In sslvpn to lan policy specify fortigate lan interface subnet as destination so only fortigate lab subnet traffic will route over ssl vpn.

tpatel · 11-01-2024

Hello Jab, Have you configured ippool ip address as secondary ip address on wan interface ? Can you please try to assigned ip address as secondary ip address on interface and try to ping.https://community.fortinet.com/t5/FortiGate/Technical-Tip-Set-a...

tpatel · 10-31-2024

Hello Julian, It look correct configuration, as you have mention ra-giaadr as loopback ip address so you will also get a ip according to that scope. Also checked connectivity between loopback address to dhcp server like ping from loopback to dhcp ser...

User Statistics

User Activity

Technical Tip: How to configure FortiGate to send syslog to FortiManager

Troubleshooting Tip: Traffic is getting denied by SNAT IP pool check

Technical Tip: How to enable local intra-zone traffic logs

Troubleshooting Tip: Users cannot see checksum for all VDOM

Technical Tip: How to check OSPF advertised and received routes on a FortiGate

Re: Can't access Forticloud by Fortitoken Mobile validation failed.

Re: ACME Clarification

Re: SSL VPN is not doing split tunnel

Re: can´t ping ippool from cli @120G 7.2.9 - works fine @80F 7.2.9

Re: FortiGate SSL VPN with External DHCP Server

Re: Forticlient IPSEC w/ SAML stuck in connecting

Re: Access to Fortigates, to mgmt IP addresses, fr...

Re: Your connection is not private in Google Chrom...

Re: FSSO with FortiAuthenticator

Re: FortiGate SSL VPN with External DHCP Server

Re: FortiGate SSL VPN with External DHCP Server

Re: Multiple VRF Aware Remote Access SSL VPN Tunne...

KCS