About AndrewX

AndrewX · 11-01-2024

Description This article describes how to make sure to access the MGMT interface to secondary firewall (HA). Scope FortiGate. Solution Background: 2 FortiGate firewalls configured in HA(A-P) and hosted in Azure running in load balancer mode. An upgra...

AndrewX · 11-01-2024

Description This article describes how to make sure external mail reaches the internal mail server and end user machines. Scope FortiGate. Solution Traffic flow: external users --> Microsoft mail servers (40.xx.xx.0/24) --> FortiGate WAN IP: 182.xx.x...

AndrewX · 10-23-2024

Description This article describes how to make sure EAP TLS authentication working properly over IPSec Overlay. Scope FortiGate, FortiAuthenticator, FortiAP, FortiSwitch. Solution Background: FortiGate 200F HA cluster in the branch. FortiAP and Forti...

AndrewX · 10-21-2024

Description This article describes how to verify the different hostnames in HA cluster members. Scope FortiGate, SNMPv3. Solution Enable the SNMP on the HA MGMT interface on both FortiGate clusters. Create an SNMP v3 user with an authentication and e...

AndrewX · 09-10-2024

Description This article describes the issue when the HA Failover logid 35016 is not logged. Scope FortiGate. Solution Background info: The logid 35016 means HA failover success; However, this logID can`t be detected in failover logs. If the case is ...

User Statistics

User Activity

Troubleshooting Tip: Lost management access to secondary firewall (in HA) after Firmware upgrade

Troubleshooting Tip: Internal On-Prem Exchange unable to be connected to from External email

Technical Tip: EAP TLS Authentication does not work over IPSec Overlay

Technical Tip: SNMPv3 identify different hostname in HA cluster members

Technical Tip: HA Failover logid 35016 is not logged

KCS