Re: DNS Security Profile blocks safe domains

Keerthi_A · 10-10-2023

Description This article describes how to configure HTTPS protocol in SD-WAN performance SLA for the health check. Scope FortiGate 7.4.1. Solution Configuring HTTPS protocol in SD-WAN performance SLA uses HTTP-GET to test the link with the server. Al...

Keerthi_A · 09-14-2023

Description This article describes how to remedy when the FortiGate Central Management: FortiGate Cloud connection status shows 'Not Managed'. Scope FortiGate. Solution The connection status 'Not Managed' indicates that the FortiGate is not connected...

Keerthi_A · 09-06-2023

Description This article describes how to troubleshoot the SNMPv3 debug error 'USM decryption error'. Scope FortiGate. Solution Debugging SNMP: diagnose debug resetdiagnose debug application snmpd -1diagnose debug console timestamp enablediagnose deb...

Keerthi_A · 08-10-2023

Description This article describes the issue where VPN phase 1 is not coming up for a route-based VPN and the debug logs are showing the message: 'ignoring IKEv2 request, primary is still active'. Scope FortiGate. Solution This article assumes that b...

Keerthi_A · 07-26-2023

Description This article describes how to configure a specific source IP to access a specific VIP & all other source IPs to use a different VIP (external IP remains same). Scope FortiGate. Solution IP schema used, in this example: VIP1: External IP: ...

Keerthi_A · 11-08-2023

Hi @Riggie, Could you collect the below logs to investigate further? If possible, create a PCAP from the Android client.The following application is unrelated to Fortinet, but it has been helpful for creating packet captures per application.https://p...

Keerthi_A · 11-08-2023

Hi @SCHMIEDER_Operator , You may go through the below link to view under which category the respective domain is categorized https://www.fortiguard.com/services/sdns If you believe the domain is wrongly categorized, please raise a case with Fortinet ...

Keerthi_A · 09-14-2023

Hi @MadDog_2023, Run the below debug commands on both ends. diagnose debug reset diagnose debug flow filter clear diagnose debug flow filter saddr diagnose debug flow filter daddr diagnose debug flow trace start 255 diagnose debug enable once the c...

Keerthi_A · 09-14-2023

Hi @tuan2tech, Could you please provide more information on the device model and firmware version?

Keerthi_A · 09-14-2023

Hi @MadDog_2023 As I understand, traffic from BO DMZ is received at the HO firewall, but you do not see an outgoing reply/response from HO LAN? If so collect the debug to see if this traffic is allowed and being forwarded to the HO LAN interface. If ...

User Statistics

User Activity

Technical Tip: SD-WAN performance SLA health check with HTTPS protocol

Technical Tip: FortiGate Central Management: FortiGate Cloud connection status 'Not Managed'

Troubleshooting Tip: SNMPv3 debug error 'USM decryption error'

Technical Tip: IPSEC debug log message ‘ignoring IKEv2 request, primary is still active’

Technical Tip: How to configure VIP access where specific source IP to access specific VIP & all other IPs to use a different VIP (External IP remains same)

Re: Server unreachable error when user approves FortiToken on phone, new token temporarily solves th