Technical Tip: Install FortiGate-VM on Hyper-V and...

xshkurti · 11-26-2024

Description This article describes how to disable email notifications for admin login attempts when automation stitches are not configured Scope FortiOS 6.4.x. All FortiOS 7.x versions. Solution In the previous versions, email alerts were sent from C...

xshkurti · 10-30-2024

Description This article describes the process of troubleshooting traffic flow when an IPPool is configured under the firewall policy for IPsec tunnel traffic. Scope FortiGate all versions. Solution In common situations, when an IPsec VPN is created ...

xshkurti · 09-25-2024

Description This article describes how to view real client IP on FortiProxy when user is hidden behind another proxy device with x-forwarded HTTP headers configured to send ClientIP inside HTTP headers Scope FortiProxy 7.0+ Solution The solution belo...

xshkurti · 08-16-2024

Description This article describes the process of installing a FortiOS-VM in the Hyper-V platform for testing purposes with a permanent Trial License Scope FortiOS-VM. Solution To install a FortiOS-VM in a hypervisor platform a FortiCare account is r...

xshkurti · 07-31-2024

Description This article describes how to troubleshoot FortiGate IPsec VPN when certificate-based authentication is enabled but the certificate private key fails to load from the certificate repository. Scope FortiOS 7.0+. Solution As a first step of...

xshkurti · 12-13-2024

@GraemeM You can fix it by adding more subnets under phase2 selectors:Adding source and destination subnets to IPsec VPN phase 2 configurations | FortiGate-7000 5.4.9 | How to configure IPsec remote access with... - Fortinet CommunityFortinet Documen...

xshkurti · 10-01-2024

Hi Umesh, You can follow this guide to setup some hard-timeout value for users.Hard timeout for Dialup IPSEC VPN Tunnel - Fortinet CommunityThis will force them to reauthenticate or disconnect form the session if they fail to do so.

xshkurti · 10-01-2024

@hemanth4 Thank you for your post here. This seems most likely like a Splunk configuration issue so I think it is better to ask on that forum. After doing a little research I found this link that might point you in the right direction in case FortiGa...

xshkurti · 10-01-2024

Hi @trymeee Thanks for the feedback. Can you mark my answer as a solution so other guys that might require the same information, have it easier to find this post? Thanks

xshkurti · 09-23-2024

@trymeee There are some ways to do it.First you enable if you want strong cyphers or weak cyphers, and then you choose which one to use from cypher suite:FortiGate encryption algorithm cipher suites | FortiGate / FortiOS 7.0.0 | Fortinet Document Lib...

User Statistics

User Activity

Technical Tip: How to disable email alerts for admin login attempts

Troubleshooting Tip: IPPool over IPsec encrypted traffic denied

Technical Tip: How to view/log actual client IP on FortiProxy FortiView when traffic is received from another proxy with X-fowarded-for enabled

Technical Tip: Install FortiGate-VM on Hyper-V and apply Permanent Trial License

Troubleshooting Tip: IPsec certificate based VPN, failed to load private key /etc/cert/local/

Re: Remote VPN to 3 site-to-site VPNs

Re: how to set timeout for vpn users in Ipsec vpn/L2tp over ipsec

Re: Universal splunk forwarder as sidecar not showing internal splunk logs

Re: Is there anyway to disable / enable specific TLS cipher suites that I want to use for fortigate

Re: Is there anyway to disable / enable specific TLS cipher suites that I want to use for fortigate

Technical Tip: Install FortiGate-VM on Hyper-V and...

Technical Tip: Free up memory to avoid conserve mo...

Troubleshooting Tip: IPsec certificate based VPN, ...

Technical Tip: FortiGate Site-to-Site VPN with Str...

Technical Tip: RestAPI Backup via PowerShell

Re: Is there anyway to disable / enable specific T...

Re: About fortigate HA behaivor

Re: Internal users can`t reach web service on WAN2...

Re: Fortimanager sso adfs saml

Re: Can't see the IP address in windows DNS

KCS