Description This article describes the FortiGate configuration block
Amazon Prime Video. Scope FortiGate. Solution The following sample
configuration goal is to block access to Amazon Prime videos but allow
access to the Amazon website. Application C...
Description This article describes an issue regarding packet loss on
traffic after setting the traffic shaper on FortiGate 9xG and 12xG.
Scope FortiGate-9xG and 12xG. Solution When the traffic shaping policy
is enabled, packet loss is observed in the...
Description This article describes how to prevent ESP error logs from
being sent to FortiAnalyzer. Scope FortiGate v7.2.4 or more recent with
FortiAnalyzer Logging. Solution From FortiOS v7.2.4, the ESP packet
handling process has the detection of un...
Description This article describes a change of behavior in version 7.2.6
and more recent version where the FortiGate interface does not respond
to Ping even if Ping is allowed in interface configuration. Scope
FortiGate version 7.2.6 and more recent ...
Description This article describes the difference in SIP inspection
configuration and behavior between FortiOS 7.0 and 7.2.5. Scope FortiOS
7.2.5 or more recent. Solution SIP ALG stands for Session Initiation
Protocol Application Layer Gateway. It is...
Hello @papapuff , please refer to this Technical Tip: Redundant IPSEC
Tunnel using single WAN connection with a configuration sample with
active/backup IPsec tunnels for a similar topology as yours. For phase 2
configuration, please remember that the...
Hello @tuan2tech You can also check in Security Events logs for
WebFilter, Application control, SSL... depending on which UTM profiles
you have configured in firewall policy LAN to WAN.
Hello @Sadhi_Jayz , If you hover the cursor over the application
signature, it will provide you further information and will mention if
SSL deep inspection is required. You can also refer to Fortiguard
website for more info regarding the application ...
Hello Alex,"inherit_sockport" means that the session is inheriting the
source port from the original connection. Do you have "preserve source
port" (or fixedport) configured?
