Description This article describes the functionality of 'set
update-cascade-interface' when configured under 'config health-check in
SD-WAN. Scope FortiGate v7.0.0 or higher Solution As a first step,
'update-cascade-interface' cannot function indepen...
Description This article describes how to add a secondary SNMP server on
VDOM-enabled FortiGate and FortiGate is on HA. Scope FortiGate v7.2.0.
Solution Suppose that interface ‘mgmt’ is a management interface for
Primary FortiGate with: IP 10.10.10.2...
Description This article describes why the PPPOE interface does not show
as a selected interface on an SD-WAN Rule and a workaround to verify the
traffic passing via PPPOE Interface. Scope FortiGate v7.2.3. Solution
When a PPPoE interface is added on...
Description This article describes how to configure L2TP VPN for Windows
machines in an example scenario where FortiGates are deployed on a Cloud
service such as AWS (especially when FortiGate is behind the NAT
device). Scope FortiOS 7.2.3. Solution ...
Description This article explains how to work around an issue where
FortiGuard shows a different IP geographical location than the expected
location. Scope FortiGate Solution For example: X.X.X.X (X.X.X.0/23) is
registered by a US entity. However, th...
Hi Secsupport, Regarding firewall policies: On FortiGate A: IPSEC tunnel
to Port1 (enable NAT here) -- to allow internet access to VPN users
coming from Fortiagate B On Fortigate B: Lan to IPSEC (without NAT)
Dear Mzane The SSL VPN sometimes gets stuck at 40%. This can be caused
when the FortiClient opens a new window in the back asking to proceed as
the certificate is un-trusted. After clicking 'yes', the connection will
proceed normally. Refer the follo...
Hi Secsupport, Let's suppose you have configured the VPN parameters and
firewall policies as per the article mentioned. Regarding static
routing, I will briefly explain you based upon the below diagram. Let
Fortigate A is connected to the internet vi...
Hi Omkam, If you had not deleted the ping service from the fortigate,
you would have seen ping and icmp services as below while searching. If
you had not deleted it before and it is still not showing then it is
better to create a new ticket for it.
Sounds like a session timeout issue. Try changing the session TTL of the
firewall policy you have configured to allow traffic between two
VLANsconfig firewall policyedit 1set name "test"set uuid
2586cfe6-8777-51ed-7baa-a6ac55525c14set srcintf "vlan10...
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.