Technical Tip: How to troubleshoot HSTS captive po...

sbabu · 10-28-2024

Description This article explains how to troubleshoot a connectivity issue with an external threat feed server. Scope FortiGate Solution Check the connectivity of the external threat feed server from the FortiGate firewall. exec ping-options source 1...

sbabu · 10-01-2024

Description This article describes how to troubleshoot the HSTS error for the captive portal in Google Chrome. Scope FortiGate, Google Chrome. Solution HTTP strict transport security (HSTS) is a web security standard that forces browsers to connect t...

sbabu · 09-26-2024

Description This article describes how to configure an external IPv6 threat feed server. Scope FortiGate and internal threat feed server. Solution A Threat feed server provides a continuous stream of data about potential and current cyber threats suc...

sbabu · 09-19-2024

Description This article describes how an IPv6 SLAAC address gets generated in a LAN network when the FortiGate LAN interface acts as an IPv6 router. Scope FortiGate. Solution Topology: On FortiGate's LAN interface, a submet has been configured, and ...

sbabu · 09-19-2024

Description This article describes the SSL VPN issue where no certificate pop-up appears and is stuck at 40% and eventually connection goes down. Scope FortiClient, FortiGate, SSL VPN. Solution Normally when the SSL VPN connection percentage reaches ...

sbabu · 09-28-2024

HI @Umesh I see that you have a query related to SD-WAN. In FortiGate, the route preference will be first policy route and then SD-WAN routes. Hence you should have a default route pointing toward the SD-WAN virtual interface this will help to route ...

sbabu · 09-28-2024

Hi @ashik_k The issue with the captive portal is due to the latest update on Google Chrome. When we open the browser the connectivity test will happen with google.com which is HSTS sites. As a workaround, you can try accessing non-HSTS sites like exa...

sbabu · 09-03-2024

Yes, Fortigate accepts GARP

sbabu · 08-28-2024

HI @jefazo92 If you have a broadcast IP address you can create a firewall policy with deny action and place it top of allow rule.

sbabu · 08-27-2024

hi @yodiallo when the internet is failing, Please run the below-mentioned command to see what is happening with traffic. Trace logs:- > diagnose debug reset> diagnose debug flow filter> diagnose debug flow filter saddr x.x.x.x -- source address> diag...

User Statistics

User Activity

Troubleshooting Tip: How to Troubleshoot external threat feed server not connecting

Technical Tip: How to troubleshoot HSTS captive portal error in Google Chrome

Technical Tip: How to configure an internal IPv6 threat feed server

Technical Tip: How an IPv6 SLAAC address gets generated in a LAN network when the FortiGate LAN interface acts as an IPv6 router

Technical Tip: How to troubleshoot SSL VPN issue where no certificate pop-up appears and stuck at 40%

Re: SDWAN (with two ISP)

Re: Captive portal issue

Re: does Fortigate accept gratuitous arp?

Re: Can directed broadcast be disabled in a Fortigate?

Re: I have a problem that I can't understand.

Technical Tip: How to troubleshoot HSTS captive po...

Technical Tip: How to configure an internal IPv6 t...

Re: Captive portal issue

Technical Tip: Dial_up Native VPN (L2TP) is no lon...

Technical Tip: How to troubleshoot SSL VPN issue w...

KCS