Technical Tip: 'All FortiGuard servers failed to r...

SAJUDIYA · 11-18-2024

Description This article describes how to handle an issue where FortiClient drops connection at 70-80% completion with no error. Scope FortiGate. Solution If a FortiMobile Token is used, the error manifests after entering a FortiMobile token code at ...

SAJUDIYA · 11-17-2024

Description This article describes the issue of HA out-of-sync and when trying to access the secondary from CLI, the below error is found: execute ha manage 1 ssh: connect to host 169.254.0.2 port 22: No route to host Scope FortiGate v7.2 and above v...

SAJUDIYA · 11-13-2024

Description This article describes how to resolve an issue where the Outlook application gets disconnected after connecting behind FortiGate, but works if it is directly accessed. Trying to reinstall the Outlook application and following a solution f...

SAJUDIYA · 11-12-2024

Description This article describes an alternate method to decommission a FortiGate device from FortiCloud support Portal. Scope FortiGate, FortiGate Cloud. Solution Note: The process detailed below removes existing firewall licenses and removes the s...

SAJUDIYA · 11-12-2024

Description This article describes how to block a particular application on a particular Firewall Policy using an Application Control security profile. Scope FortiOS all version. Solution Go to the Security Profile section -> Application Control whic...

SAJUDIYA · 11-05-2024

@luccap07 Make sure that your web filter is in flow mode and it is able to identify category. If you see category shows unknown then please provide screenshot of error and also provide log output.

SAJUDIYA · 10-16-2024

Hello @ctyctyctctcty , I would suggest to soft restart BGP route as below and if we still have issue, you can run bgp debug as mentioned: https://community.fortinet.com/t5/FortiGate/Technical-Tip-BGP-soft-reset-to-refresh-BGP-routing-table/ta-p/19014...

SAJUDIYA · 01-03-2024

@FTAdmin You need to follow steps as below: 1. You need to add 3rd party address in phase-2 selectors of main firewall if that traffic is behind main firewall 2. You can configure SNAT/DNAT for this traffic to moved traffic from main to third party w...

SAJUDIYA · 01-03-2024

@piaakit1210 Based on details and requirements , you can configured firewall policy as you mentioned, From: AnyTo: AnySource: AllDestination: "Tor-Relay.Node" and "Malicious-Malicious.Server"Schedule: AlwaysAction: DenyLog Violation Traffic: EnabledE...

User Statistics

User Activity

Technical Tip: FortiClient drops at 70-80% with no error message

Technical Tip: HA out-of-sync and 'No route to host' error when accessing secondary device from CLI

Troubleshooting Tip: Outlook disconnecting when connected behind FortiGate

Technical Tip: How to deregister FortiGate using FortiCloud

Technical Tip: How to block particular application using Application Control Filter

Re: Web Filter issues

Re: BGP Routes Not Available issue

Re: Passing traffic from a remote office to the main office and then to a 3rd party

Re: Firewall policy denying all traffic question

Technical Tip: 'All FortiGuard servers failed to r...

Technical Tip: Lockdown ISL remain enabled even di...

Technical Tip: 'This FortiGate unit does not have ...

Troubleshooting Tip: ZTNA traffic denied because o...

Re: Passing traffic from a remote office to the ma...

KCS