Re: IPSEC Tunnel doesn't match user in incoming tr...

dbhavsar · 04-23-2024

Description This article describes the solution to add an interface in the software switch Scope FortiGate. Solution Below are the things to check first before adding the interface: The interface should have 0 references. The device detection should ...

dbhavsar · 04-22-2024

Description This article describes why an interface may not be listed in the dropdown menu while creating a 'Shared WAN' tunnel and offers a solution. Scope FortiGate Solution As shown in the following image, the intended interface to share internet ...

dbhavsar · 03-29-2024

Description This article describes how to rename the FortiLink interface Scope FortiGate Solution According to this related article from FortiGate itself, it is not possible to rename the interface: Technical Tip: Rename interface Before renaming the...

dbhavsar · 03-25-2024

Description This article describes how to resolve an issue where an SSL VPN user is not able to connect and receives a 'web_blocklist_check' error. Scope FortiGate. Solution First, test the credentials of the user from the FortiGate itself. If the us...

dbhavsar · 03-19-2024

Description This article describes how to fix an issue where it is not possible to manage K model FortiAPs from FortiGate v7.2 or earlier. Scope v7.4.3 or above. Solution When K models of FortiAP are installed, they will not be seen on a FortiGate ru...

dbhavsar · 04-25-2024

Hi @aw-sysadmin , - Also make sure your windows defender is turned off or if you have turned it on make sure you have allowed rule for that port.

dbhavsar · 04-23-2024

Hi @unknown1020 - Can you confirm that required services are allowed in the policy for incoming traffic. Also please collect following debugs:diagnose debug resetdiagnose debug flow filter addr xx.xx.xx.xx yy.yy.yy and <---xx is SourceIP and yy is De...

dbhavsar · 04-23-2024

Hi @Magster ,one more thing can you confirm that the ISP port plugged that interface is in VDOM-A?

dbhavsar · 04-22-2024

Hi @tanaki ,If your setup is in HA and you are using management interface then you can review this case scenarios and update the settings in the HA as per your requirement:https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Allow-NTP-sync...

dbhavsar · 04-19-2024

Good day Martin, Can you provide the following output:diagnose sys session filter src diagnose sys session filter dst diagnose sys session list

User Statistics

User Activity

Troubleshooting Tip: cannot add interface to software switch

Troubleshooting Tip: Interface not getting listed in dropdown menu while creating 'Shared WAN' tunnel

Technical Tip: Renaming the FortiLink interface [802.3ad Aggregate]

Troubleshooting Tip: SSL VPN user not able to connect - 'web_blocklist_check' error

Troubleshooting Tip: Cannot manage K model FortiAPs from FortiGate v7.2 or earlier

Re: LDAPS issue, 'Can't contact LDAP server'

Re: access problems towards vpn s2s

Re: BGP Peering - My Fortigate - ISP

Re: NTP sync not working

Re: IPSec client is blocked by implicit deny although allow rule exists

Re: IPSEC Tunnel doesn't match user in incoming tr...

Technical Tip: Valid IPS license but not showing i...

Re: LDAPS issue, 'Can't contact LDAP server'

Re: static route to L2TP client host ip

Re: Security POP

Re: Security POP

Re: Ensure Security Fabric question

KCS