Technical Tip: Web filter is not blocking websites...

ezhupa · 11-13-2024

Description This article describes out-of-sync issues caused by a VPN certificate.local between a FortiGate and FortiManager in a Backup mode ADOM. Scope FortiGate, FortiManager. Solution Randomly FortiGate checksums change and this causes the FortiG...

ezhupa · 10-23-2024

Description This article describes issues with virtual servers in HTTP mode after upgrading to the newer versions of 7.4 branch such as 7.4.3-7.4.5 Scope FortiGate. Solution Consider the following configuration working in the 7.4.1 firmware version.V...

ezhupa · 09-17-2024

Description This article describes issues when FortiGate 120G/121G failed to get HA in sync after upgrading to 7.2.9. Scope FortiGate 120G/121G. Solution When upgrading the 120G/121G FortiGates in the HA cluster from the 7.0 branch to 7.2.9 some devi...

ezhupa · 08-07-2024

Description This article describes how to resolve an issue where a DSL link is not coming up when using FortiGate 80F-DSL. Scope FortiGate, FortiOS. Solution When trying to establish a VDSL connection between a 80F-DSL FortiGate with an inbuilt modem...

ezhupa · 07-17-2024

Description This article describes that DNS resolution is not blocked if it contains uppercase with policy in flow mode with a domain threat feed set to block certain domains. Scope FortiGate. Solution When configuring an external domain threat feed ...

ezhupa · 11-20-2024

Hello Danny, Thanks a lot for your work and very convenient tools!! Kudos to you!

ezhupa · 11-20-2024

Hello, If you have multiple VPN tunnels configured you might be matching the below article:https://community.fortinet.com/t5/FortiGate/Technical-Tip-Dialup-IPSEC-issues-after-upgrading-v7-2-6-and-v7/ta-p/283504 Overlapping of routes caused VPN tunnel...

ezhupa · 11-20-2024

Hello, Depending on the FGT that you have and resources available you should be able to enable logging on the device. That being said, if the device is a low end device, it is recommended to log only security events (if security profiles are enabled ...

ezhupa · 10-30-2024

Hello Destination in this case can be all since nevertheless you will block everything through UTM and will filter by source to the specific subnet you want this rule to apply. Service I would suggest "ALL" Action would of course be accept in order t...

ezhupa · 10-30-2024

Hello, Do you have the possibility to simulate a console access on the virtual environment? It would be interesting to know if port5 is up on the secondary device as well. Since port5 is added as an interface to be monitored, if you send it manually ...

User Statistics

User Activity

Technical Tip: FortiGate checksum changes and FortiManager Backup Mode device status becomes out-of-sync

Technical Tip: HTTP Virtual Servers not working after upgrade to 7.4.3+

Technical Tip: HA issues after upgrade to 7.2.9 for FortiGate 120G/121G

Troubleshooting Tip: VDSL issues on FortiGate 80F-DSL

Technical Tip: DNS requests with uppercase not blocked with an external Domain threat feed

Re: Show custom local-in policies in FortiGate WebUI

Re: Dialup L2TP IPSEC Dynamic routing after upgrage from 6.4.15 to 7.0.X

Re: Consensus for Firewall Policy Logging

Re: Allow specific full url in fortigate

Re: need assistance understanding HA A-P

Technical Tip: Web filter is not blocking websites...

Technical Tip: SSL VPN on PPPoE issues after upgra...

Technical Tip: HA issues after upgrade to 7.2.9 fo...

Technical Tip: Dialup IPsec flapping issues after ...

Re: FortiClient connection problem in China

Re: Redundant dial-up VPN FG to FG

Re: Ha sync config delay

Re: DNS Virtual Server load balancing to real serv...

Re: Direction incoming vs outgoing in logs (Fortig...

Re: Route vpn ipsec comes from port mgmt

KCS