Re: AWS tunnel issue

amrit · 08-17-2024

Description This article describes how to make policy traffic logs visible when a loopback and VIP objects are used in the firewall policy. Scope FortiGate. Solution In a scenario where a Public IP has to be translated to a private IP for SSL VPN acc...

amrit · 07-21-2024

Description This article describes that the outgoing traffic is blocked by the implicit deny policy even if a valid firewall policy is in place. Scope FortiOS 7.2.6+, 7.4.1+. Solution Source IP: 10.11.15.2, Interface: port2. Destination IP: 8.8.8.8, ...

amrit · 07-14-2024

Description This article describes how to disable offloading for Intra Zone traffic. Scope FortiGate v6.4.X, v7.0.X, v7.2.X, v7.4.X. Solution Zone details: config system zone edit "Lab" set description '' set intrazone allow set interface "lan" "x1" ...

amrit · 06-16-2024

Description This article describes that Asymmetric routing is experienced when a backup tunnel on ADVPN Spoke has the same tunnel IDs as the primary tunnel. Scope FortiGate v7.0.x, v7.2.x, v7.4.x. Solution Example : HUB(TunnelID:10.10.10.1)----Ipsec ...

amrit · 01-31-2024

Description This article describes how to advertise a static route with a gateway IP in the BGP or ADVPN. Scope FortiOS 6. x.x, 7. x.x. Solution If an advertised static route in the BGP includes a gateway IP, the BGP next hop address will point to th...

amrit · 08-31-2024

DH param 8192 is DH bit modulus group 18, which will make the encryption keys a lot longer. That means more computation power is required for the IPsec decryption. For more details, You can check the RFC 3526. So, if the other side doesn't support th...

amrit · 08-25-2024

Are you accessing the objects from the downstream fortigate? Make sure the address group and object synchronization are enabled in the fabric. You can refer to this document : https://docs.fortinet.com/document/fortigate/7.6.0/administration-guide/88...

amrit · 08-22-2024

if your firmware version is below 7.2.4 then you can use this document to reset the password (console or direct acess via mgmt or any other interface is required) https://community.fortinet.com/t5/FortiGate/Technical-Tip-Resetting-a-lost-admin-passwo...

amrit · 08-22-2024

What type of ipsec tunnels are you creating ? Is it ADVPN HUB and spoke or is this a site to site vpn tunnel? Yes, for the failover purposes, it would be best to create two tunnels on each wan link i.e four tunnels but you don’t need to create 8 poli...

amrit · 08-17-2024

You cannot upload the same configuration file between different models. If you don’t want to use the forticonveter service then you need to manually configure the firewall. You can refer to this document https://community.fortinet.com/t5/FortiGate/Te...

User Statistics

User Activity

Technical Tip: Policy traffic logs are not visible when a Loopback and a VIP is used

Technical Tip: Policy lookup matches the implicit deny policy due to IP pool

Technical Tip: How to disable offloading for Intra zone traffic

Technical Tip: Routing Problem ADVPN Hub with single WAN link and spoke with Dual WAN

Technical Tip: How to advertise a static route configured with a Gateway IP in the BGP or ADVPN

Re: command set dh-params 8192 impact ?

Re: Static route with address from global object group

Re: FGT 800D how to reset?

Re: SD-WAN and IPsec

Re: restoring configuration file 100E to 100F

Re: AWS tunnel issue

Re: Intermittent site issue from Office to AWS

Re: Blocking IPV6 Traffic

Re: i can use p2p as wan

Re: SSO SAML Timeout & Disconnects PSA

Re: FGT 800D how to reset?

Re: WAD process restart impact

Re: Use single Forticlient for multiple organizati...

Re: Testing HA Failover with ISP Issues on FortiGa...

Re: Firewall blocked Fortinet Single Sing On Agent...

KCS