Technical Tip: FortiGate SD-WAN performance SLA sh...

SassiVeeran · 10-23-2024

Description This article describes that FortiGate blocks the TCP-null packet by default. Scope FortiGate. Solution TCP-Null packet series of TCP packets that contain a sequence number of 0 and no set flags. FortiGate blocks TCP null packets by defaul...

SassiVeeran · 10-17-2024

Description This article describes how to troubleshoot if the internal DNS server fails to resolve any FQDN. Scope FortiGate, Window Server. Solution Problem Statement: FortiGate is configured with an internal DNS (primary) server and a FortiGuard se...

SassiVeeran · 09-26-2024

Description This article describes how to use Blackhole to control SD-WAN traffic failover. Scope FortiGate. Solution Forward traffic as below: From 10.0.xx.10 to 8.8.8.8 via WAN1 only. From 10.0.xx 11 to 1.1.1.1 via WAN2 only. Expected behavior: Onc...

SassiVeeran · 09-15-2024

Description This article describes that the FortiCloud portal shows license expiration even though the contract has been renewed for appliances. Scope FortiGate, FortiCloud. Solution The user renewed the contract for two FortiGates. FGTXXXXXXXX788 FG...

SassiVeeran · 08-25-2024

Description This article describes if the FortiGate has a feature to hide DHCP server IP. Scope FortiGate. Solution There is no way to configure FortiGate to not reflect the DHCP server IP when the user performs an 'ipconfig /all' on a Windows machin...

SassiVeeran · 03-30-2024

Hi there, Please see if the article here fixes your issues. https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Lost-internet-connection-when-connecting-SSL/ta-p/286345#:~:text=To%20resolve%20this%2C%20either%20create,once%20VPN%20connect...

SassiVeeran · 12-16-2023

Hi, Two way here, but its all depend on your requirement at last. Idea is just to route/allow the traffic through required port. - You may find article here to configure port forwarding using VIP for any custom ports. https://docs.fortinet.com/docume...

SassiVeeran · 12-16-2023

Hi, - whether it is sslvpn web mode or tunnel mode? - You may verify the setup sslvpn with ldap by referring to doc link here. https://docs.fortinet.com/document/fortigate/6.4.2/administration-guide/115783/ssl-vpn-with-ldap-user-authentication - what...

SassiVeeran · 12-16-2023

Hi, You may refer link here to find out possible cause for route not advertise to the neighbor. https://community.fortinet.com/t5/FortiGate/Technical-Note-Common-issue-when-trying-to-advertise-a-subnet-to/ta-p/193295 https://community.fortinet.com/t5...

SassiVeeran · 12-15-2023

Hi, - if the failover WAN stop passing the traffic, check whether the port Tx & Rx counters of the port incrementing. https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-FortiGate-interface-error-counters/ta-p/190190 - Try to check if any...

User Statistics

User Activity

Technical Tip: FortiGate blocks TCP-null packet

Troubleshooting Tip: Unable to browse website when using internal DNS server

Technical Tip: How to steer SD-WAN traffic using Blackhole

Technical Tip: The FortiCloud portal shows number of license expiration days

Technical Tip: Hide DHCP server IP in FortiGate

Re: No internet access the user when connected on the Forti Client VPN (IPSEC)

Re: FortiGate - VLAN Want To Create a Lockdown Policy for It

Re: ssl vpn with LDAP connection failed

Re: Why not advertised via BGP?

Re: Strange problem with failover WAN Connection

Technical Tip: FortiGate SD-WAN performance SLA sh...

Re: Why not advertised via BGP?

Technical Tip: How to steer SD-WAN traffic using B...

Technical Tip: How to deploy dial-up IPsec VPN in ...

Troubleshooting Tip: Ping fails to the WAN IP of F...

Re: FortiGate - VLAN Want To Create a Lockdown Pol...

Re: change email content - Interface status change...

KCS