Re: New "diagnose debug traffic..."

jiyong · 12-17-2024

Description This article describes the parent and child correlation behavior of ISDB service objects. Scope FortiGate. Solution ISDB Object IDs: Amazon-AWS (393320). Amazon-AWS.CloudFront (393481). If the user wants to change the service ports for 'A...

jiyong · 10-21-2024

Description This article describes an issue in which FortiView Source and Destination results do not have output. Scope FortiGate. Solution Typically, FortiView's Source/Destination output is triggered when a packet passes from the internal interface...

jiyong · 09-10-2024

Description This article describes an issue where blank spaces appear when importing CNAT in FortiManager. Scope FortiManager v7.0. Solution Reproduce Step: ADOM Workspace enabled. ADOM Normal mode. Step1: Change Central-NAT policy from FortiGate: St...

jiyong · 09-05-2024

Description This article describes how to minimize service interruption when deleting an existing tunnel and creating a new IPsec tunnel. Scope FortiGate. Solution Topology : Stage 1. Create a new tunnel between the center and branch FortiGate: confi...

jiyong · 09-03-2024

Description This article describes how to resolve if VIP settings for the same external IP are not possible. Scope FortiGate v7.0. Solution Before v7.2: The goal is to configure the same external IP (VIP) address to be mapped to different internal IP...

jiyong · 09-10-2024

Hi Freren, Good day! Please open a FortiCare ticket to check and provide details about this feature.

jiyong · 09-10-2024

I think it is expressed in bytes, but I think I need to look for more information. # diagnose debug traffic interfaceInterfaces:port1 1 monitored interfaces. # diagnose debug traffic peek port1 1 # diagnose debug traffic history port1 11725951565 - 4...

jiyong · 09-09-2024

Hi @AlexFerenX When checking the above command, it looks like this: interface : List traffic monitor interface.peek : Display interface traffic real-time data.history : Dump interface traffic history data. To use the above debug, the settings below m...

jiyong · 09-08-2024

Hi, @hhhhh If it is not processed according to your firewall policy, the results may be left blank. For example, client-rst/server-rst.

jiyong · 09-05-2024

Please check the command below. # diag sys top 1 20 # fnsysctl killall [high resource process] // restart process

User Statistics

User Activity

Technical Tip: Internet Service (ISDB) port-range not being changed

Technical Tip: FortiView Source and Destination results do not have output (no result)

Troubleshooting Tip: FortiManager is not able to import the CNAT, DOS, local-in and traffic shaping policies

Technical Tip: How to minimize service interruption when replacing a new single tunnel

Technical Tip: How to configure same external IP (VIP) address to mapped to different internal IP or src-filter