Technical Tip: Usage of ‘auto-discovery-crossover’...

GeorgeZhong · 01-06-2026

Description This article describes a multicast routing issue in a FortiGate ADVPN hub-and-spoke deployment, where multicast traffic forwarded by the hub based on the multicast routing table is received by only one spoke when hardware offloading is en...

GeorgeZhong · 01-05-2026

Description This article describes the behavior where the reference count of a Zero Trust Network Access (ZTNA) server object is 0 in the FortiGate GUI and CLI when a firewall policy is used instead of a proxy policy. This is expected behavior and wo...

GeorgeZhong · 12-14-2025

Description This article describes an issue where SSL VPN or IPsec VPN users using SAML authentication fail to connect. The issue occurs only when the SAML entry on FortiGate contains a forward slash (/) in the Name Field.In such cases, FortiGate fai...

GeorgeZhong · 11-24-2025

Description This article describes the meaning of the different 'registered protocols' in the output of 'get router info bfd neighbor detail'. This helps to understand that the BFD neighborship is established based on which protocol. Scope FortiGate,...

GeorgeZhong · 10-16-2025

Description This article describes a known issue in FortiAuthenticator where the RADIUS Client configuration cannot be retrieved through a REST API call when using an admin account with a custom admin profile. Scope FortiAuthenticator v6.6.5 and earl...

GeorgeZhong · 01-01-2026

Hi @ialhusari93 , we only need to reset the daemon on the primary unit since SSLVPN connection is handled by it only while secondary is just standby.

GeorgeZhong · 12-31-2025

Hi, Based on the description, it could be due to underlying firmware issue. However, the FortiOS 7.0.17 is old and out of TAC support. It is suggested to upgrade to latest mature version FortiOS 7.4.9 for permanent solution. In current FortiOS 7.0.17...

GeorgeZhong · 12-31-2025

Hi, By looking at the FortiGate configuration itself, we don't see any issue. But the thing is we need to ensure all phase 1 and phase2 configurations are well matched between FortiGate and StrongsWan. Below debug commands can be executed on the Fort...

GeorgeZhong · 10-08-2025

Hi @yeowkm99 , There is no compatibility issue between different versions of FortiGate with the IPsec. So, we can either upgrade them at same time or different time. But please be aware of the compatibility of other devices such as FortiManager, Fort...

GeorgeZhong · 10-08-2025

Hi @Liza1 , The only option is to perform factory reset and reload the firmware image and configuration. This is for the security purpose. Please follow below instructions to format and reload the firmware image: https://community.fortinet.com/t5/For...

User Statistics

User Activity

Technical Tip: Multicast Routing Issue over FortiGate Hub-and-spoke deployment

Technical Tip: Explanation of the behavior ZTNA Server Reference count is zero

Technical Tip: SSL/IPsec VPN SAML Authentication on FortiGate Fails When Name Field Contains '/'

Technical Tip: Clarification of 'Registered protocols' under BFD neighbor detail

Technical Tip: unable to use REST API to access RADIUS clients configuration with custom admin profile

Re: Fortigate 7.0.17 SSL VPN disconnections and drops

Re: Fortigate 7.0.17 SSL VPN disconnections and drops

Re: Pls, Help-me Strongswan On Linux Mint with FortiGate (Client-to-site)

Re: Upgrading to FortiOS 7.4.8

Re: Unable to Access or Restore Super Admin Privileges on FortiGate

Technical Tip: Usage of ‘auto-discovery-crossover’...

Re: SSL VPN Doesn't work after firmware update 7.2...

Re: Time-based administrator login access

Technical Tip: How ICMP-redirect works in FortiGat...

Re: Fortigate 7.0.17 SSL VPN disconnections and dr...

Re: Time-based administrator login access

KCS

User Statistics

User Activity

You are leaving our website