Description This article describes how to manage FortiGate’s internal
service (over HTTPS) using a ZTNA Access Proxy. Scope FortiOS starting
v7.0.6 GA. Solution Starting v7.0.6, there is a behavior change applied
to FortiOS. See this article: Technic...
Description This article describes default behavior while there are two
different ports are used in Explicit Proxy for HTTP and HTTPS. Scope All
supported versions of FortiOS. Solution There is an option to specify
different listening proxy ports on ...
Description This article explains how to troubleshoot CSR generation if
the certificate is generated without a Subject Alternative Name (SAN)
using the FortiGate GUI. Scope FortiOS 7.2.X, 7.4.X, 7.6.X. Solution The
Subject Alternative Name (SAN) attr...
Description This article describes FortiGate’s default behavior when it
is operating in a different secure-explicit-proxy mode. Scope FortiOS
v7.4.0 and above, FortiOS v7.6.0 and above. Solution A secure-web-proxy
option is available starting 7.4.0: ...
Description This article explains the default certificate matching
behavior for SSL-VPN and IPsec VPN tunnels on FortiGate. Scope FortiGate
v7.0, v7.2, v7.4, v7.6. Solution According to the internal engineering
documentation, FortiGate’s certificate ...
I would suggest considering placing your FGT before Mikrotik, and adjust
your firewall policies on FGT. Then, send all traffic to Mikrotik which
could act as default route to your FGT. If you have several segments,
and all routes are in the Mikrotik,...
Dear team, before purchasing, or getting a device from second hand,
please ensure that the legacy owner has active email in the support
portal, and can transfer his device to you. Meanwhile, be informed from
Local Sales Representatives, if you purcha...
Have a look also to this documentation, step #2. It should be possible
to perform without EMS server as @ozkanaltas said:
https://docs.fortinet.com/document/forticlient/7.2.4/administration-guide/445907/configuring-autoconnect-with-username-and-passw...
Could you make a packet capture with some debugs on FGT enabled, and
compare outputs. Which device does terminate connection? Maybe you could
see some errors from debugs: 1. packet capture between FGT and DC. 2.
debugs: diag de reset diag de app fnba...
