Troubleshooting Tip: SSL VPN fails at 98%

hbac · 05-12-2025

Description This article describes an issue where an IPsec tunnel phase2 will not come up due to a Phase 2 Perfect Forward Secrecy PFS settings mismatch. This issue can happen to both remote access and site-to-site tunnels. Scope FortiGate. Solution ...

hbac · 05-05-2025

Description This article describes how to activate/deactivate an Automation Stitch at a specified time. In this example, an Automation Stitch is configured to send email alerts when there is a failed admin login attempt. However, the FortiGate admini...

hbac · 04-06-2025

Description This article describes how to resolve an issue where it is not possible to upgrade/downgrade firmware, and the error message 'Unable to upgrade/downgrade firmware through FortiGuard because of invalid license status' is thrown despite the...

hbac · 04-03-2025

Description This article describes the creation or deletion of a static route via CLI on the FortiGate. It will be useful in case the GUI is inaccessible. Scope FortiGate. Solution To list active routes in the routing-table, run the command below: ge...

hbac · 03-07-2025

Description This article describes an issue when a user tries to connect to a Dial-Up VPN tunnel using SAML authentication and the FortiClient shows a blank screen after authenticating on the SAML login page (Azure in this example). Scope FortiOS 7.2...

hbac · 12-23-2024

Hello @jomof, Have you tried making those changes in the CLI? Regards,

hbac · 12-17-2024

Hi @mmorcali, Yes, it is possible to manage FortiGate devices from multiple FortiManager instances. You can form a Fabric of FortiManager. You can refer to https://docs.fortinet.com/document/fortimanager/7.6.0/new-features/25342/fabric-of-fortimanage...

hbac · 12-11-2024

Hello @vnkhwazi, 7.6 is still new and yes, it has memory issues. This is one of them https://community.fortinet.com/t5/FortiGate/Technical-Tip-WAD-wad-config-notify-process-consumes-high-Memory/ta-p/328385 Did you check which process is causing high ...

hbac · 12-09-2024

Hello @rcpdkc, Each FortiToken is unique and can't be used on multiple FortiGates. You will need a FortiAuthenticator as an authenticator. https://docs.fortinet.com/document/fortiauthenticator/6.4.0/radius-interoperability-guide/417981/configuring-au...

hbac · 11-22-2024

Hi @fortinet-davidy, Your diagram looks good. I don't think you need any special configuration for SDWAN if it is already working. You can refer to https://docs.fortinet.com/document/fortigate/7.6.0/administration-guide/23145/sd-wan-with-fgcp-ha Rega...

User Statistics

User Activity

Troubleshooting Tip: IPsec phase2 not coming up with 'did not expect PFS DH group' error in IKE debugs

Technical Tip: How to activate/deactivate an Automation Stitch at a specified time

Troubleshooting Tip: Unable to upgrade/downgrade firmware due to invalid license status even though FortiGate has a valid license

Technical Tip: How to create or delete static routes via CLI on FortiGate

Troubleshooting Tip: Blank screen on FortiClient while connecting to a Dial-Up tunnel using SAML authentication

Re: Not seeing the option configure to AES and sha 256 on FortiGate hub using ADVPN

Re: Is it possible to manage fortigate from multiple fortimanager?

Re: Memory usage increases everyday after upgrading to 7.6.0

Re: Multi Fortigate Firewall One Token

Re: Fortigate SDWAN with Cisco ASR1K

Troubleshooting Tip: SSL VPN fails at 98%

7.0.14 Build 7201 for FG9xG is available.

Re: Firmware " FortiOS" Updates on a large scale

Re: ERR_EMPTY_RESPONSE only using Google Chrome ac...

Re: PDF of Self-Placed courses

Re: Is it possible to manage fortigate from multip...

Re: Fortigate SDWAN with Cisco ASR1K

Re: Configure one rule to allow multiple vlans to ...

Re: Webpage not open "TCP reset from client"

Re: Automated Backup FTP Error

KCS

User Statistics

User Activity

You are leaving our website