Technical Tip: How to enable private-data-encrypti...

atahir · 07-24-2025

Description This article describes the default behavior of an explicit proxy feature in FortiGate. Scope FortiGate. Solution This article explains the default behavior of the explicit web proxy feature in FortiGate, which is used to proxy HTTP and HT...

atahir · 09-20-2024

Description This article indicates FortiAnalyzer HA configurations that will not synchronize. Scope FortiAnalyzer. Solution Configuration synchronization in a FortiAnalyzer (HA) cluster provides both redundancy and load balancing across all units. Th...

atahir · 09-08-2024

Description This article describes how to perform File system check on FortiAnalyzer when it is in a High Availability (HA) setup Scope FortiAnalyzer Solution A file system check, also known as fsck, is a utility used to verify and repair the consist...

atahir · 09-04-2024

Description This article describes how to enable the private-data-encryption feature on a standalone FortiGate. Scope FortiGate v6.2+. Solution The Private Data Encryption feature on FortiGate devices is designed to enhance security by encrypting sen...

atahir · 08-27-2024

Description This article describes the troubleshooting steps to assess the health of a FortiGate hard disk. Scope FortiGate, 3700D. Solution The FortiGate device may occasionally display a 'log disk error' in the alert console. This message typically...

atahir · 07-21-2025

A few other information may be required to analyze the issue.1. FortiGate Version2. FortiClient Version

atahir · 07-21-2025

The error “no SA proposal chosen” indicates that none of the proposals sent by the initiator matched the responder's accepted parameters.

atahir · 07-21-2025

FYIike V=root:0:63bbeace24f33672/0000000000000000:189: negotiation failureike V=root:Negotiate ISAKMP SA Error:ike V=root:0:63bbeace24f33672/0000000000000000:189: no SA proposal chosen

atahir · 07-21-2025

You need to verify four configuration points: Phase 1, Phase 2, Firewall Policy, and Routing.Use IKE debug commands to gather data for IPsec Phase 1 and Phase 2.Ping can help you check reachability, and finally, you can run a debug flow to verify how...

atahir · 02-20-2025

I have tested the nested IPsec solution today and I can pass the traffic.DesignPC1 - FGT1 - FGT2 - FGT3 - FGT4 - PC2First IPsec Tunnel between FGT2 and FGT3Second Tunnel between FGT1 and FGT4 once configured, PC1 can ping PC2 without any issue FGT1 #...

User Statistics

User Activity

Troubleshooting Tip: Default behavior of the explicit proxy in FortiGate

Troubleshooting Tip: FortiAnalyzer HA configurations that will not synchronize

Technical Tip: File system check on FortiAnalyzer in a High Availability (HA) setup