Description This article describes default behavior while there are two
different ports are used in Explicit Proxy for HTTP and HTTPS. Scope All
supported versions of FortiOS. Solution There is an option to specify
different listening proxy ports on ...
Description This article explains how to troubleshoot CSR generation if
the certificate is generated without a Subject Alternative Name (SAN)
using the FortiGate GUI. Scope FortiOS 7.2.X, 7.4.X, 7.6.X. Solution The
Subject Alternative Name (SAN) attr...
Description This article describes FortiGate’s default behavior when it
is operating in a different secure-explicit-proxy mode. Scope FortiOS
v7.4.0 and above, FortiOS v7.6.0 and above. Solution A secure-web-proxy
option is available starting 7.4.0: ...
Description This article explains the default certificate matching
behavior for SSL-VPN and IPsec VPN tunnels on FortiGate. Scope FortiGate
v7.0, v7.2, v7.4, v7.6. Solution According to the internal engineering
documentation, FortiGate’s certificate ...
Description This article provides a workaround for the HA Out-of-Sync
issue observed on firmware version 7.6.3. The issue can occur in both
Active-Active and Active-Passive HA configurations. Scope FortiGate
v7.6.3 GA. Solution Zero-day malware strea...
I would suggest considering placing your FGT before Mikrotik, and adjust
your firewall policies on FGT. Then, send all traffic to Mikrotik which
could act as default route to your FGT. If you have several segments,
and all routes are in the Mikrotik,...
Dear team, before purchasing, or getting a device from second hand,
please ensure that the legacy owner has active email in the support
portal, and can transfer his device to you. Meanwhile, be informed from
Local Sales Representatives, if you purcha...
Have a look also to this documentation, step #2. It should be possible
to perform without EMS server as @ozkanaltas said:
https://docs.fortinet.com/document/forticlient/7.2.4/administration-guide/445907/configuring-autoconnect-with-username-and-passw...
Could you make a packet capture with some debugs on FGT enabled, and
compare outputs. Which device does terminate connection? Maybe you could
see some errors from debugs: 1. packet capture between FGT and DC. 2.
debugs: diag de reset diag de app fnba...
