Re: Fortigate - Explicit proxy with Kerberos

dkochhar · 10-20-2024

Description This article describes how to fix DNS-related issues while configuring the GCP SDN connector. Scope FortiGate (This applies to FortiGate hosted on the google platform only). Solution For configuring the GCP connector, Refer to: Configurin...

dkochhar · 08-18-2024

Description This article describes how to diagnose and fix an issue where the user receives a FortiToken license error with code -7566 while importing a FortiToken through the CLI. Scope FortiGate. Solution When trying to import FortiToken from GUI, ...

dkochhar · 07-29-2024

Description This article describes how to create a bypass rule and demonstrates an example of whitelisting a range/subnet of IPs through firewall policy. Scope FortiGate. Solution Let’s take an example here: The goal is to white-list the following ra...

dkochhar · 09-26-2023

Description This article describes how to setup multicast over a GRE tunnel with PIM dense mode. Scope FortiGate. Solution This article demonstrates an example of multicast over a GRE tunnel with PIM dense mode. The fllowing topology is used:Machine:...

dkochhar · 09-14-2023

Description This article describes how to rename the Certificate in the FortiGate. Scope FortiGate. Solution The following commands can be used to check whether a certificate can be renamed. The '?' command is used to show the list of all available s...

dkochhar · 10-30-2024

@kamarale The Poll works for the FSSO agent. If you have the FSSO agents installed then it pools the additional information from the server. If you cannot install the FSSO agent therefore we can continue adding the LDAP server from the FortiGate GUI ...

dkochhar · 10-30-2024

@babarmunir Can you please attach the crash logs.Moreover, please run the following commands if again it goes into conserve mode before rebooting the device:get system statusget system performance status <----- Use this command three times leaving a ...

dkochhar · 10-26-2024

@moverall2 Can you please confirm your Forticlient version ?

dkochhar · 10-26-2024

Please try to change the fortiguard settings to these: config system fortiguard set fortiguard-anycast disable set protocol udp set port 53 set sdns-server-ip 208.91.112.220 set source-ip end

dkochhar · 10-26-2024

@connectbv do you have fortiguard-anycast disable or enabled in your config ?You can check it through following:#config system fortiguard#show full | grep anycast

User Statistics

User Activity

Technical Tip: GCP SDN connector DNS connectivity issue

Troubleshooting Tip: Unable to import mobile FortiTokens ('import fortitoken license error: -7566)

Technical Tip: How to configure Whitelist firewall policy

Technical Tip: Multicast over GRE tunnel with PIM dense mode

Technical Tip: Renaming the certificate in FortiGate

Re: Fortigate - Explicit proxy with Kerberos

Re: memory conserve threshold values are hardcoded in FortiOS

Re: Connecting via Forticlient VPN reverts all ethernet adapters to old DNS settings

Re: FortiGuard Servers Down

Re: FortiGate WebFilter Issue

Re: Fortigate - Explicit proxy with Kerberos