Description This article describes how to download the configuration
file using the FortiGate support tool. Scope FortiSASE. Solution The
FortiGate Support Tool is available for the Google Chrome browser. To
install the Fortinet support tool extensio...
Description This article helps to identify in what order the route map
rule is processed. Scope FortiGate. Solution The route map rules will be
sorted by ID. The rule ID will determine which rule will be matched
first. As an example, configure the BG...
Description This article describes how to decrypt the HTTPS traffic on
the client using Wireshark. While using virtual servers on FortiGate, it
is sometimes necessary to decrypt the traffic on the client end to
isolate the issue further. Scope Window...
Description This article describes that in some environments, sometimes
it is necessary to create a VIP with external FQDN to map with an
internal server IP address. Follow the below steps to create a VIP: Go
to Policy & Objects -> Virtual IPs and se...
Description This article describes how to use the hardware switch to
manage the FortiSwitches. Scope All FortiOS. Solution Enable the
FortiLink option from the CLI. config system interface FGT(interface) #
edit Hardware_Switch FGT(Hardware_Switch) # ...
Greetings, First of all, are you using policy NAT or Central NAT? There
are 2 NAT modes in FortiGate: policy NAT mode and central NAT mode.
Policy NAT mode requires NATs to be configured inside firewall policies,
which is the default mode that FortiG...
Greetings, What version of Forticlient are you using? What is the
version of macOS? The reason can be the desktop operating system cannot
be compatible with your forticlient version. Please check the
compatibility by checking the release notes of For...
Greetings, In this case, maybe it's not just the BGP. The traffic does
not flow when the tunnel doesn't have NAT-T enabled. Starlink uses
Carrier-Grade NAT (CGNAT) to conserve IP addresses. This means that
Starlink assigns a single public IP address ...
Hello refer, This community article discusses the comparison between
software and hardware switch,
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Setup-comparison-between-FortiGate-Hardware-switch/ta-p/210092
Regards! If you have found a s...
Greetings, You would like to use ICMP redirect to inform the host about
the better next hop to reach a certain destination. First of all, enable
the following settings on the interface, # config system interface edit
"interface_name" set icmp-accept-...
