Troubleshooting Tip: How to identify if traffic re...

ihaidar · 12-15-2024

Description This article explains how to resolve the Packet drops issue on FortiSASE when there is packet drops from FortiSASE to Hub. Scope FortiSASE, FortiGate. Solution In some cases, a few packet drops may lead to SLA Failover on FortiSASE and he...

ihaidar · 12-12-2024

Description This article describes how to configure IP Pools on Policy-based NGFW mode. Scope FortiGate. Solution Let's assume that three IP addresses are required to be source NATed for a particular public IP address each. User 1: 192.168.9.129----N...

ihaidar · 11-20-2024

Description This article describes the logs of VPN events when it shows 'success phase1 negotiate from unknown Peer'. Scope FortiGate. Solution In case any malicious or unknown peer is trying to build an IPsec Tunnel with the locally configured Tunne...

ihaidar · 11-18-2024

Description This article describes how to troubleshoot if the VLAN Gateway is not pingable on FortiGate. Scope FortiGate. Solution In some cases, VLAN interfaces are configured under an aggregate interface which is connected to LAN Network. If VLANs ...

ihaidar · 09-24-2024

Description This article describes why the client device ID might not be showing in ZTNA traffic logs Scope FortiSASE, FortiGate. Solution To show the client device ID value in the FortiGate logs, create a proxy Policy and add the ZTNA tag to it. The...

ihaidar · 03-08-2023

Hi Roland, The Source- Destination Strategy will allow the traffic which is sent from a specific source IP to a specific destination IP to be sent to the same interface. If you want to create an SD-WAN Rule which will override the implicit rule. You ...

ihaidar · 02-14-2023

Please try to set the QUIC to block. Facebook and YouTube use the protocol to connect to their servers. Please refer to this thread: https://community.fortinet.com/t5/Support-Forum/Unable-to-Block-HTTPS-Facebook-and-Youtube-in-Google-Chrome/m-p/61928

User Statistics

User Activity

Troubleshooting Tip: How to overcome the Packet drops issue on SPA on FortiSASE

Technical Tip: Configuring 'One-to-One' Source NAT on Policy-based NGFW

Technical Tip: The meaning of successful IPsec Phase 1 Negotiation logs with unknown Peer IP addresses