Re: memory conserve threshold values are hardcoded...

dkochhar · 12-06-2024

Description This article describes how to block ICMP timestamps and replies for internal traffic that originates from behind the FortiGate. Scope FortiGate. Solution This article demonstrates an example of how to block ICMP timestamps and replies for...

dkochhar · 11-28-2024

Description This article describes why the status of an EMS connector shows as down for a downstream device in the security fabric after upgrading to 7.4.5. Scope FortiOS. Solution The status of the EMS connector shows as down in the GUI for a downst...

dkochhar · 10-20-2024

Description This article describes how to fix DNS-related issues while configuring the GCP SDN connector. Scope FortiGate (This applies to FortiGate hosted on the google platform only). Solution For configuring the GCP connector, Refer to: Configurin...

dkochhar · 08-18-2024

Description This article describes how to diagnose and fix an issue where the user receives a FortiToken license error with code -7566 while importing a FortiToken through the CLI. Scope FortiGate. Solution When trying to import FortiToken from GUI, ...

dkochhar · 07-29-2024

Description This article describes how to create a bypass rule and demonstrates an example of whitelisting a range/subnet of IPs through firewall policy. Scope FortiGate. Solution Let’s take an example here: The goal is to white-list the following ra...

dkochhar · 11-04-2024

@Knuppel1983 Unfortunately, this is a global feature. This setting is not available per tunnel for now.

dkochhar · 10-30-2024

@kamarale The Poll works for the FSSO agent. If you have the FSSO agents installed then it pools the additional information from the server. If you cannot install the FSSO agent therefore we can continue adding the LDAP server from the FortiGate GUI ...

dkochhar · 10-30-2024

@babarmunir Can you please attach the crash logs.Moreover, please run the following commands if again it goes into conserve mode before rebooting the device:get system statusget system performance status <----- Use this command three times leaving a ...

dkochhar · 10-26-2024

@moverall2 Can you please confirm your Forticlient version ?

dkochhar · 10-26-2024

Please try to change the fortiguard settings to these: config system fortiguard set fortiguard-anycast disable set protocol udp set port 53 set sdns-server-ip 208.91.112.220 set source-ip end

User Statistics

User Activity

Technical Tip: How to block ICMP timestamp and replies for internal traffic

Techincal Tip: EMS connector issue after upgrading to v7.4.5, 'Certificate callback error -1: Error (-1@_check_verify_ems_ca:759' seen in debugs'

Technical Tip: GCP SDN connector DNS connectivity issue

Troubleshooting Tip: Unable to import mobile FortiTokens ('import fortitoken license error: -7566)

Technical Tip: How to configure Whitelist firewall policy

Re: IPsec TCP port per tunnel

Re: Fortigate - Explicit proxy with Kerberos

Re: memory conserve threshold values are hardcoded in FortiOS

Re: Connecting via Forticlient VPN reverts all ethernet adapters to old DNS settings

Re: FortiGuard Servers Down

Re: memory conserve threshold values are hardcoded...

Re: Fortigate - Explicit proxy with Kerberos