Technical Tip: Free up memory to avoid conserve mo...

xshkurti · 09-25-2024

Description This article describes how to view real client IP on FortiProxy when user is hidden behind another proxy device with x-forwarded HTTP headers configured to send ClientIP inside HTTP headers Scope FortiProxy 7.0+ Solution The solution belo...

xshkurti · 08-16-2024

Description This article describes the process of installing a FortiOS-VM in the Hyper-V platform for testing purposes with a permanent Trial License Scope FortiOS-VM. Solution To install a FortiOS-VM in a hypervisor platform a FortiCare account is r...

xshkurti · 07-31-2024

Description This article describes how to troubleshoot FortiGate IPsec VPN when certificate-based authentication is enabled but the certificate private key fails to load from the certificate repository. Scope FortiOS 7.0+. Solution As a first step of...

xshkurti · 10-25-2023

Description This article describes how to handle scenarios where the FortiGate SD-WAN member interfaces are up but there is no connectivity to the ISP, causing network issues. Scope All versions of FortiOS with SD-WAN configured. Solution SDWAN Once ...

xshkurti · 09-21-2023

Description This article describes how to set up an IKEv2 S2S IPsec VPN between FortiGate and Strongswan installed in Ubuntu Linux. Scope FortiGate v6.x,v 7.x. Solution Logical Topology for Site-to-Site VPN between FortiGate and Strongswan in Ubuntu ...

xshkurti · 10-01-2024

Hi Umesh, You can follow this guide to setup some hard-timeout value for users.Hard timeout for Dialup IPSEC VPN Tunnel - Fortinet CommunityThis will force them to reauthenticate or disconnect form the session if they fail to do so.

xshkurti · 10-01-2024

@hemanth4 Thank you for your post here. This seems most likely like a Splunk configuration issue so I think it is better to ask on that forum. After doing a little research I found this link that might point you in the right direction in case FortiGa...

xshkurti · 10-01-2024

Hi @trymeee Thanks for the feedback. Can you mark my answer as a solution so other guys that might require the same information, have it easier to find this post? Thanks

xshkurti · 09-23-2024

@trymeee There are some ways to do it.First you enable if you want strong cyphers or weak cyphers, and then you choose which one to use from cypher suite:FortiGate encryption algorithm cipher suites | FortiGate / FortiOS 7.0.0 | Fortinet Document Lib...

xshkurti · 08-22-2024

GUI, under User & Device > User Definition you will see all the users. In the far right column there's a column called 'Ref'. Click the number next to the user to show you all the groups it's been added to.This way you can check in what groups is thi...

User Statistics

User Activity

Technical Tip: How to view/log actual client IP on FortiProxy FortiView when traffic is received from another proxy with X-fowarded-for enabled

Technical Tip: Install FortiGate-VM on Hyper-V and apply Permanent Trial License

Troubleshooting Tip: IPsec certificate based VPN, failed to load private key /etc/cert/local/

Troubleshooting Tip: How to ensure network connectivity in case SD-WAN member interfaces are UP but there is an ISP issue

Technical Tip: FortiGate Site-to-Site VPN with Strongswan on Ubuntu

Re: how to set timeout for vpn users in Ipsec vpn/L2tp over ipsec

Re: Universal splunk forwarder as sidecar not showing internal splunk logs

Re: Is there anyway to disable / enable specific TLS cipher suites that I want to use for fortigate

Re: Is there anyway to disable / enable specific TLS cipher suites that I want to use for fortigate

Re: SSl VPN user match two portal profile

Technical Tip: Free up memory to avoid conserve mo...

Technical Tip: Install FortiGate-VM on Hyper-V and...

Technical Tip: FortiGate Site-to-Site VPN with Str...

Technical Tip: RestAPI Backup via PowerShell

Troubleshooting Tip: Email Generated Reports butto...

Re: Is there anyway to disable / enable specific T...

Re: About fortigate HA behaivor

Re: Internal users can`t reach web service on WAN2...

Re: Fortimanager sso adfs saml

Re: Can't see the IP address in windows DNS

KCS