Technical Tip: How to troubleshoot HSTS captive po...

sbabu · 01-08-2026

Description This article describes how to view the Endpoint list in an Excel sheet downloaded from the FortiSASE portal. Scope FortiSASE. Solution Users can download the list of Endpoints connected to FortiSASE by navigating to Dashboard → Status → E...

sbabu · 12-17-2025

Description This article describes how to configure ZTNA in FortiGate for SMB server access. Scope FortiGate, FortiClient EMS, FortiClient. Solution FortiGate does not expose the SMB server; It controls the TCP proxy, and only compliant users or devi...

sbabu · 10-30-2025

Description This article describes how to troubleshoot an SD-WAN on-ramp POP that is unable to connect due to 'could not allocate IPv4 address' in FortiSASE. Scope FortiSASE, SD-WAN On-Ramp, FortiGate. Solution In the VPN tunnel summary, it was ident...

sbabu · 08-21-2025

Description This article describes an FortiSASE VPN connection timeout error, 'Timeout while connecting to turbo-xxxxx.xxxx.xxxx.fortisase.com'. Scope FortiSASE. Solution Users trying to connect to FortiSASE VPN encounter the following error and cann...

sbabu · 07-17-2025

Description This article describes how to configure NAT64 to allow IPv6 traffic to reach IPv4-only traffic domains when central SNAT is enabled. Scope FortiGate. Solution Topology: Enable Central SNAT by navigating to System -> Settings -> System Ope...

sbabu · 09-28-2024

HI @Umesh I see that you have a query related to SD-WAN. In FortiGate, the route preference will be first policy route and then SD-WAN routes. Hence you should have a default route pointing toward the SD-WAN virtual interface this will help to route ...

sbabu · 09-28-2024

Hi @ashik_k The issue with the captive portal is due to the latest update on Google Chrome. When we open the browser the connectivity test will happen with google.com which is HSTS sites. As a workaround, you can try accessing non-HSTS sites like exa...

sbabu · 09-03-2024

Yes, Fortigate accepts GARP

sbabu · 08-28-2024

HI @jefazo92 If you have a broadcast IP address you can create a firewall policy with deny action and place it top of allow rule.

sbabu · 08-27-2024

hi @yodiallo when the internet is failing, Please run the below-mentioned command to see what is happening with traffic. Trace logs:- > diagnose debug reset> diagnose debug flow filter> diagnose debug flow filter saddr x.x.x.x -- source address> diag...

User Statistics

User Activity

Technical Tip: Downloaded endpoint list from FortiSASE cannot be opened as CSV or other file formats

Technical Tip: How to configure ZTNA in FortiGate for SMB server access with ZTNA Tags

Technical Tip: How to troubleshoot SD-WAN On-Ramp tunnel is due to 'could not allocate IPv4 address' in FortiSASE

Technical Tip: FortiSASE VPN connection timeout with VPN_EAP event log 'Timeout while connecting to turbo-xxxxx.xxxx.xxxx.fortisase.com'

Technical Tip: How to configure NAT64 to allow IPv6 traffic to reach IPv4-only traffic domain when central SNAT is enabled

Re: SDWAN (with two ISP)

Re: Captive portal issue

Re: does Fortigate accept gratuitous arp?

Re: Can directed broadcast be disabled in a Fortigate?

Re: I have a problem that I can't understand.

Technical Tip: How to troubleshoot HSTS captive po...

Technical Tip: How to configure an internal IPv6 t...

Technical Tip: Dial_up Native VPN (L2TP) is no lon...

Technical Tip: FortiSASE VPN connection timeout wi...

Technical Tip: How to configure NAT64 to allow IPv...

KCS

User Statistics

User Activity

You are leaving our website