Troubleshooting Tip: Let's Encrypt certificate ren...

sashish · 03-30-2023

Description This article describes how to fix an issue where renewing a Let's Encrypt certificate fails because it cannot reach the server. Scope Any supported version of FortiOS. Solution This issue occurs when the Let's Encrypt enrollment server ca...

sashish · 12-28-2022

Description This article describes that starting from version 7.2.x, it is possible to create ISDB destination SD-WAN rule from GUI, instead of creating from CLI with category ID. Scope Version 7.2. Solution It is possible to create an SD-WAN rule ba...

sashish · 12-27-2022

Description This article describes how to block URL categories without using a Web filter profile in NGFW-mode. Scope FortiGate 7.2.x. Solution It is possible to directly block the URL category and Application in the firewall policy. In policy based ...

sashish · 12-27-2022

Description This article describes how to allow/block the ISDB services on basis of GeoIP Database. Scope FortiGate 7.2.x. Solution If there is a requirement to block Zscaler connection based on GeoIP, Zscaler has multiple cloud servers based on GeoI...

sashish · 08-18-2023

Nice article Mehul. 

sashish · 03-29-2023

Hi Agus, You can use SD-WAN feature in performance SLA and as per the latency SLA would triggered to do failover. SD-WAN rules also consider in policy routing. You can check below article for your reference. https://docs.fortinet.com/document/fortiga...

sashish · 02-25-2023

Hi, Yes you can configure alertmail if you are on 6.4 on above firmware version. Let's suppose your internal1 is your WAN interface. An example to trigger alert email when internal1 interface changes its state is shown below: # config system automati...

sashish · 12-26-2022

Hi Omkam, Yes you can directly upgrade from FortiGate. https://docs.fortinet.com/document/fortigate/6.4.5/administration-guide/596131/upgrading-the-firmware If you want to push upgrade from FortiManager, make sure the FGT is registered to FortiManage...

sashish · 12-26-2022

Dear Hazem, Thank you for posting to the Fortinet Community Forum. Problem Description:- Malware hash external list. Unfortunately there won't be any publicly available article from FGT. You can try below Hash from vriustotal. https://virusshare.com/...

User Statistics

User Activity

Troubleshooting Tip: Let's Encrypt certificate renewal fails with 'timeout during connect (likely firewall problem)' error

Technical Tip: How to create ISDB destination SD-WAN fom GUI

Technical Tip: How to block URL category and Application in policy based NGFW-mode

Technical Tip: How to allow/block Internet Service Database (Zscaler) via GeoIP database

Re: Technical Tip: Analyzing TCP RST (Reset) packets in Wireshark

Re: Failover policy routing base on latency

Re: Set up email alert for WAN link status

Re: Fortigate Upgrade

Re: Malware hash external list.

Troubleshooting Tip: Let's Encrypt certificate ren...

Technical Tip: How to allow/block Internet Service...

Re: Fortigate Upgrade

Re: Fortigate Upgrade

KCS