Troubleshooting Tip: EMS certificate not trusted w...

mle2802 · 01-08-2024

Description This article describes the reasons why an IPsec tunnel does not show as 'up' and instead receives the IKE error 'no policy configured'. Scope FortiGate. Solution When running the IKE debug for IPsec VPN, the following error can appear: ik...

mle2802 · 12-29-2023

Description This article describes the solution for the error 'Virtualized Intel VT-XEPT is not supported on this platform' that may appear while running a FortiGate VM. Scope FortiGate VM. Solution When starting up a VM FortiGate, the error 'Virtual...

mle2802 · 12-29-2023

Description This article describes one of the possible reasons for a P1_Retransmit of an IPsec tunnel with Pfsense. Scope FortiGate and Pfsense. Solution When creating site-site Ipsec tunnel with a Pfsense firewall, the phase 1 and IKE debug return t...

mle2802 · 12-29-2023

Description This article describes reasons why the client receives a different DHCP scope. Scope FortiGate and Windows. Solution On FortiGate, there are 2 different DHCP scopes which are port7 and vlan 70. The client host is intended to get the IP fr...

mle2802 · 12-29-2023

Description This article describes how to map a single external IP to an internal IP range to circumvent the 'Invalid IPv4 address' error. Scope FortiGate. Solution When creating a VIP to map a single external IP to an internal IP range, the error 'I...

mle2802 · 02-20-2024

Hi @ck8882.,You can use link-monitor for this purposes. Please refer to the following documents:https://community.fortinet.com/t5/FortiGate/Technical-Tip-Combining-Remote-Link-Monitoring-with-FGCP-cluster/ta-p/191330https://community.fortinet.com/t5/...

mle2802 · 02-20-2024

Hi @tehm,When trying to unset update location, what is the FDS server IP you are getting from debug? Please also try to run packet capture to see if it may be MTU issue.Regards,

mle2802 · 02-19-2024

Hi @tehm,Can you try to connect your device to different network such as home Internet or hotspot and try to do the validation again?

mle2802 · 02-19-2024

Hi @tehm,Yes that correct. Change to "unset update-server-location". Also debug upstream FortiGate to see if traffic from this device being blocked.

mle2802 · 02-19-2024

Hi @tehm,Can you try to unset update location and try again?

User Statistics

User Activity

Troubleshooting Tip: IKE error 'no policy configured'

Troubleshooting tip: Error 'Virtualized Intel VT-XEPT is not supported on this platform' with a virtual FortiGate

Troubleshooting Tip: P1_Retransmit of IPsec tunnel with Pfsense

Troubleshooting Tip: Client receives the wrong DHCP scope

Troubleshooting Tip: 'Invalid IPv4 address' in VIP with an internal IP range

Re: FortiGate HA - Would it Failover if an interface remains active but IP connectivity is lost

Re: Fortigate VM 7.4.3 stuck at Validating License to FortiGuard

Re: Fortigate VM 7.4.3 stuck at Validating License to FortiGuard

Re: Fortigate VM 7.4.3 stuck at Validating License to FortiGuard

Re: Fortigate VM 7.4.3 stuck at Validating License to FortiGuard

Troubleshooting Tip: EMS certificate not trusted w...

Re: Can't aggregate port1 and port2 in FG-201F

Re: Fortigate SD-WAN in one side within another Fi...

Re: Disabling VDOM mode affects policies?

Re: Instalation fail for FortiClient VPN 7.2.3

Re: Fortinet images turn on and off in EVE-Ng

Re: Fortinet images turn on and off in EVE-Ng

Re: Policy based - URL categories does't work

Re: FortiClient VPN-only version for MacOS does no...

Re: Forticlient - SAML Authentication - Pick an ac...

KCS