Technical Tip: SSL VPN Monitor shows web connectio...

Rajneesh · 12-21-2025

Description This article describes the issue of user identification on the FortiGate WiFi client-monitor dashboard, where a specific user is frequently being assigned a different IP address, and when the detail view is checked, it shows a different I...

Rajneesh · 12-18-2025

Description This article describes the SAML attributes that play an important role in the authentication of the supplicant. Scope FortiGate, FortiAuthenticator. Solution SAML (Security Assertion Markup Language) attributes are data elements included ...

Rajneesh · 12-16-2025

Description This article describes on how to extract the IDP certificate sent in the SAML response from the debug logs. Scope FortiGate. Solution The example output below contains the certificate texts from the SAML debug logs: X509Certificate>MIIGsj...

Rajneesh · 12-11-2025

Description This article describes the issue where the SAML authentication for the user is failing, and FortiAuthenticator is acting as IDP. The following error message is prompted '403 Forbidden You are not allowed to access this resource Please con...

Rajneesh · 10-29-2025

Description This article describes an issue where an external threat feed does not appear in the source field when configuring a local-in policy. Scope FortiGate. Solution When creating a local-in policy from the GUI, the configured external threat f...

Rajneesh · 12-31-2024

Hello @abdussalam Check this community article it is matching your requirement:https://community.fortinet.com/t5/Support-Forum/Atypical-HA-config-with-two-ISPs/m-p/64587?m=186883

Rajneesh · 12-29-2024

Hello @ULL1903 Following points need to checked: 1. Make sure the device supports the protocols which are running on your existing device. 2. Firewall policies needs to be correctly applied, else it will break the communicationn. 3. Device hardware c...

Rajneesh · 12-25-2024

Hello @iivel Refer to this KB article Technical Tip: Interpreting WSAGetLastError() in FortiClient Debug log:https://community.fortinet.com/t5/FortiClient/Technical-Tip-Interpreting-WSAGetLastError-in-FortiClient-Debug/ta-p/191800

Rajneesh · 12-25-2024

Hello @shiryunaga I would suggest you check this KB article: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Fortinet-Auto-Discovery-VPN-ADVPN/ta-p/195698Download the pdf attachment and it has explained about the Dual Region topology.

Rajneesh · 07-11-2024

Hello @alexpendello , You can disable the SSL VPN web-mode globally, and it will prevent the SSL page to load. Sharing the KB article : https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-disable-SSL-VPN-web-mode-globally/ta-p/272406

User Statistics

User Activity

Troubleshooting Tip: IP address of the user is showing different than the assigned in FortiGate WiFi client-monitor dashboard

Technical Tip: Understanding SAML attributes

Technical Tip: How to extract the IDP certificate sent in the SAML response from the SAML debug logs

Troubleshooting Tip: SAML authentication fails with FortiAuthenticator with error '403 Forbidden You are not allowed to access this resource Please contact your Administrator.'

Technical Tip: External threat feed not appearing in the source field of a local-in policy

Re: Need to know best/efficient practice to implement HA active-active setup using 2 DIA links and F

Re: SECURITY

Re: SSLVPN tunnel connection failed (Error=-20105) after SSL_get Error 5, WSAGetLastError 2746

Re: SDWAN-ADVPN-BGP in multiple layer network

Re: Curious about Web Portal for SSLVPN

Technical Tip: SSL VPN Monitor shows web connectio...

Re: How to check the SFP status on Secondary Firew...

Technical Tip: Understanding what is ZTNA HTTP/HTT...

Technical Tip: Unable to delete the default SD-WAN...

Technical Tip: BGP router-id selection criteria on...

Re: Fortigate HA over two internal switches (two c...

Re: whitelist specific user IP address from block ...

Re: Extract a list of web filters categories from ...

KCS

User Statistics

User Activity

You are leaving our website