Technical Tip: Free up memory to avoid conserve mo...

xshkurti · 03-28-2025

Description This article describes how to configure S2S IPsec VPN between FortiGate device and Opnsense appliance. Scope FortiOS. Solution The lab environment consists of 1 FortiGate and 1 Opnsense device, both installed as virtual appliances on top ...

xshkurti · 02-25-2025

Description This article describes how to install FortiClient in Ubuntu Noble 24.04. Scope FortiClient v.7.4.0 Solution FortiClient is an all-in-one comprehensive endpoint security solution that extends the power of Fortinet’s Advanced Threat Protect...

xshkurti · 01-29-2025

Description This article describes how to get hit count for Explicit Proxy policies through CLI. Scope FortiGate. Solution Firewall policy and explicit proxy policy operate on different levels. The same applies to statistics and how to read them.A ve...

xshkurti · 12-30-2024

Description This article describes how to check and fix the CLI output when the error 'object set operator error, -672 discard the setting' is displayed. Scope FortiGate v7.x. Solution In specific conditions, enabling 'cli-diagnose' from the CLI will...

xshkurti · 11-26-2024

Description This article describes how to disable email notifications for admin login attempts when automation stitches are not configured Scope FortiOS 6.4.x. All FortiOS 7.x versions. Solution In the previous versions, email alerts were sent from C...

xshkurti · 12-13-2024

@GraemeM You can fix it by adding more subnets under phase2 selectors:Adding source and destination subnets to IPsec VPN phase 2 configurations | FortiGate-7000 5.4.9 | How to configure IPsec remote access with... - Fortinet CommunityFortinet Documen...

xshkurti · 10-01-2024

Hi Umesh, You can follow this guide to setup some hard-timeout value for users.Hard timeout for Dialup IPSEC VPN Tunnel - Fortinet CommunityThis will force them to reauthenticate or disconnect form the session if they fail to do so.

xshkurti · 10-01-2024

@hemanth4 Thank you for your post here. This seems most likely like a Splunk configuration issue so I think it is better to ask on that forum. After doing a little research I found this link that might point you in the right direction in case FortiGa...

xshkurti · 10-01-2024

Hi @trymeee Thanks for the feedback. Can you mark my answer as a solution so other guys that might require the same information, have it easier to find this post? Thanks

xshkurti · 09-23-2024

@trymeee There are some ways to do it.First you enable if you want strong cyphers or weak cyphers, and then you choose which one to use from cypher suite:FortiGate encryption algorithm cipher suites | FortiGate / FortiOS 7.0.0 | Fortinet Document Lib...

User Statistics

User Activity

Technical Tip: How to configure IPsec Site-to-Site VPN between FortiGate and Opnsense

Technical Tip: How to install latest FortiClient software on the Ubuntu 24.04

Technical Tip: FortiGate Explicit proxy per policy hit count

Troubleshooting Tip: How to fix CLI output error when executing debugging commands from a user which is not part of the super_admin profile

Technical Tip: How to disable email alerts for admin login attempts

Re: Remote VPN to 3 site-to-site VPNs

Re: how to set timeout for vpn users in Ipsec vpn/L2tp over ipsec

Re: Universal splunk forwarder as sidecar not showing internal splunk logs

Re: Is there anyway to disable / enable specific TLS cipher suites that I want to use for fortigate

Re: Is there anyway to disable / enable specific TLS cipher suites that I want to use for fortigate

Technical Tip: Free up memory to avoid conserve mo...

Technical Tip: Install FortiGate-VM on Hyper-V and...

Technical Tip: How to install latest FortiClient s...

Technical Tip: How to view/log actual client IP on...

Troubleshooting Tip: IPsec certificate based VPN, ...

Re: Is there anyway to disable / enable specific T...

Re: About fortigate HA behaivor

Re: Internal users can`t reach web service on WAN2...

Re: Fortimanager sso adfs saml

Re: Can't see the IP address in windows DNS

KCS

User Statistics

User Activity

You are leaving our website