Re: Testing HA Failover with ISP Issues on FortiGa...

Vedaant · 07-20-2025

Description This article describes that after upgrading FortiGate VM-Azure to v7.4.8 security Fabric could not be established. Scope FortiGate. Solution After upgrading FortiGate-VM Azure to v7.4.8 security fabric could not be established in the Secu...

Vedaant · 07-15-2025

Description This article describes how to configure SNMP to send a trap from Vdom1 to the SNMP server using the root VDOM. Scope FortiGate. Solution Configure the SNMP community. For example, FortiGate has two VDOMs, Finance and IT, which are already...

Vedaant · 05-19-2025

Description This article describes how to configure an automation stitch to receive email alerts for a failed HA peer member. Scope FortiGate, all versions. Solution Create an automation stitch for email notifications to get alerts when the HA peer m...

Vedaant · 04-21-2025

Description This article describes the configuration of SAML for the HA management interface. Scope FortiGate. Solution Configure HA management interface reservation in the HA settings: Primary firewall management IP: '10.20.1.1'. Secondary firewall ...

Vedaant · 01-03-2025

Description This article describes how to troubleshoot FortiGate not joining HA Cluster due to an HA password mismatch. Scope FortiGate, all versions. Solution Run the following command to verify why FortiGate is not joining the HA cluster. diagnose ...

Vedaant · 08-18-2024

Hello @Duy2003 , Can you let us if you are using SSL VPN or IPSEC Dial UP VPN for the user ?

Vedaant · 08-07-2024

Hello Stefan, To achieve the traffic prioritization scenario you described with three VLANs (server, clients, other) using the full bandwidth of your WAN interface while ensuring the server gets full bandwidth priority when needed, you can follow the...

Vedaant · 08-07-2024

Hello @Mirza_Asad2723 , can you verify if the traffic is coming to the firewall of first remote gateway with the help of sniffer. di sniffer packet any "host x.x.x.x and host y.y.y.y.y and port sslvpn-port" 4 0 l x.x.x.x ---remote gateway IP y.y.y.y ...

Vedaant · 08-06-2024

Hello @Mirza_Asad2723 , Can you verify if both the ISP routes (WAN )are active on the FortiGate # get router info routing-table database

Vedaant · 08-06-2024

Hello @hannq, In this scenario, if the WAN connection is up and there is an issue on the ISP side. WAN port status is up then Primary FGT will still forward the traffic on the WAN interface to the next hop(ISP router)If the WAN interface status is do...

User Statistics

User Activity

Troubleshooting Tip: Security Fabric could not established after upgrading FortiGate VM-Azure to v7.4.8

Troubleshooting Tip: Configure SNMP in multi-vdom to send trap to SNMP server via management VDOM

Technical Tip: Configure automation stitch to receive email alert for HA peer failed

Technical Tip: FortiGate login with SAML for HA management Interface

Troubleshooting Tip: FortiGate not joining HA-Cluster due to an HA password mismatch

Re: issue VPN

Re: Traffic Shapping best practice

Re: SSLVPN is not establishing through the primary ISP via FortiClient.

Re: SSLVPN is not establishing through the primary ISP via FortiClient.