Technical Tip: How to block TLS 1.3 Encrypted Clie...

fricci_FTNT · 06-10-2025

Description This article describes some useful commands to troubleshoot common issues with the FortiGate Transaction Mode or before raising a ticket with the Fortinet Technical Support. Scope FortiGate. Solution When using the Workspace Mode in Forti...

fricci_FTNT · 04-22-2025

Description This article describes how to collect WAD debug logs on a FortiGate-7000 (or 6000) series chassis.In a FortiGate-7000 (or 6000) series unit, the FIM (or MBD) is the slot responsible for load-balancing the data plane traffic and forwarding...

fricci_FTNT · 03-03-2025

Description This article explains how to make sure that the GTP traffic hitting a specific firewall policy will not be inspected when a GTP profile is removed from a firewall policy. Scope FortiCarrier, GTP. Solution On FortiCarrier, when a GTP profi...

fricci_FTNT · 03-03-2025

Description This article clarifies that a FortiSwitch FS-M426E-FPOE does not support UPoE 802.3bt standard, and it is not able to provide full power to a FortiAP-431G through a single interface. Scope FortiSwitch FS-M426E-FPOE and FortiAP-431G, all f...

fricci_FTNT · 07-26-2024

Description This article describes how FortiGate blocks the TLS Encrypted Client Hello (ECH) and forces the end client to send the inner SNI in clear. When using the Encrypted Client Hello (ECH), the TLS 1.3 protocol may split the Client Hello messag...

fricci_FTNT · 07-25-2025

Hi @Borys_DE , Correct, if one of the Aruba switches dies, the spanning tree will be recalculated and the traffic will go through the other Aruba switch. Best regards,

fricci_FTNT · 07-25-2025

Hi @Borys_DE , Regarding your doubt:>>"But the lack of any settings on the FortiSwitches side confuses me. MCLAG must be configured on both sides, otherwise it simply does not work."If you want to have MCLAG from the point-of-view of the FortiSwitche...

fricci_FTNT · 07-24-2025

Hi @Borys_DE , You do not see VLAN 4094 on FortiGate GUI because it is the default management VLAN for managed FortiSwitches.Regarding your question:>>"Should I create a new VLAN with ID 4094 or is it better to change the native VLAN on Aruba?"I woul...

fricci_FTNT · 07-24-2025

Please find some FortiLink/FortiSwitchOS documentation below:https://docs.fortinet.com/document/fortiswitch/7.4.6/fortilink-guide/173260/configuring-fortilinkhttps://docs.fortinet.com/document/fortiswitch/7.4.6/fortilink-guide/173258/optional-fortili...

fricci_FTNT · 07-24-2025

Hi @Deepfriedrolos ,Thank you for letting me know.I would suggest you to run a packet capture on the Netgear port and on the FortiSwitch related ports, then analyse them with Wireshark and compare.The article below might help with FortiSwitch packet ...

User Statistics

User Activity

Troubleshooting Tip: Useful outputs to collect when troubleshooting Workspace Mode.

Troubleshooting Tip: How to troubleshoot explicit proxy on a FortiGate-7000 or 6000 series

Technical Tip: How to make sure that FortiGate does not inspect GTP traffic after a GTP profile is removed from a firewall policy

Technical Tip: Clarification on FortiSwitch FS-M426E-FPOE and UPoE 802.3bt support