Technical Tip: How FortiGate calculates BFD timers...

fricci_FTNT · 07-26-2024

Description This article describes how FortiGate blocks the TLS Encrypted Client Hello (ECH) and forces the end client to send the inner SNI in clear. When using the Encrypted Client Hello (ECH), TLS 1.3 protocol may split the Client Hello massage in...

fricci_FTNT · 12-19-2023

Description This article describes how to resolve an issue experienced on a 7000F series when the CLI on the FIM shows a mismatch message 'Error: FIM1 and FIM2 boardtype mismatch detected!' during the boot process: ----------------------------------R...

fricci_FTNT · 10-19-2023

Description This article describes how to power-off/power-on any slot on a FortiGate 7000 series from the Shelf Management Module (SMM). This procedure may be useful in situations where one or more FPMs did not restart correctly following a power out...

fricci_FTNT · 10-05-2023

Description This article describes how FortiGate calculates the BFD Transmit Interval and Detection Time in a BFD peering connection. Scope FortiGate v5.6 and above. Solution The Bidirectional Forwarding Detection (BFD) is a network protocol used to ...

fricci_FTNT · 01-11-2023

Description This article describes how to collect logs for troubleshooting purposes after a PSU failure occurs on a FortiGate 7000E series chassis. Scope FortiGate 7000E series Shelf Manager Module (SMM). Solution This article contains useful command...

fricci_FTNT · 07-25-2024

Hi @Asyraf , You may have gone already through the initial troubleshooting process explained in the article below:https://community.fortinet.com/t5/FortiAnalyzer/Technical-Tip-How-to-gather-information-and-fix-high-CPU-and-Mem/ta-p/197534 If yes, ple...

fricci_FTNT · 07-24-2024

Hi @Jaspervdb , If the server is receiving the public IP, it means you are NATing that traffic somehow. Check the routing, where the IPsec phase2 traffic is being sent to (interface and next hop). Check also the priority order on the firewall policie...

fricci_FTNT · 07-22-2024

Hi @Ireda1 , Please bear in mind that I do not know in details your network configuration and setup and you can find a much better advice from your local SE or PS service. From my understanding to achieve what you are trying to achive, all members ha...

fricci_FTNT · 07-22-2024

Hi @Ireda1 , Currently you have two sites with FortiGate HA cluster running FGCP a-p in each site. I am not aware of your network infrastructure but you may not be able to synchronise the whole config between those two sites as I guess you have diffe...

fricci_FTNT · 07-22-2024

Hi @aidnet , Thank you for letting us know. I am glad that you have managed to resolve the issue. Have a great day and week! Best regards,

User Statistics

User Activity

Technical Tip: How to block TLS 1.3 Encrypted Client Hello (ECH) in FortiGate firewalls.

Troubleshooting Tip: How to resolve issue when CLI message 'Error: FIM1 and FIM2 boardtype mismatch detected!' is showed on a 7000F series

Technical Tip: How to restart FPMs/FIMs through the SMM module on a FortiGate 7000 series.

Technical Tip: How FortiGate calculates BFD timers (Transmit Interval, Detection Time).

Troubleshooting Tip: How to troubleshoot PSU failures on Fortigate 7000E series from the SMM (Shelf Manager Module)

Re: FortiAnalyzer CPU Usage High

Re: IPse VPN behavior regarding IP addresses

Re: Sync between FG Main site and FG DR site in different locations

Re: Sync between FG Main site and FG DR site in different locations

Re: BGP NEIGHBOR IS NOT FORMED BETWEEN HQ AND BRANCH

Technical Tip: How FortiGate calculates BFD timers...

Technical Tip: How to block TLS 1.3 Encrypted Clie...

Troubleshooting Tip: How to troubleshoot PSU failu...

Technical Tip: How to configure SNMP v3 on HA clus...

Troubleshooting Tip: How to resolve issue when CLI...

Re: FortiAnalyzer CPU Usage High

Re: power button continuously flashing green issue

Re: How to see if DNS server send a NXDOMAIN error

Re: How to see if DNS server send a NXDOMAIN error

Re: Microsoft certificates re-signed as untrusted

KCS

Fortinet Training Institute