Technical Tip: How to troubleshoot HSTS captive po...

sbabu · 07-17-2025

Description This article describes how to configure NAT64 to allow IPv6 traffic to reach IPv4-only traffic domains when central SNAT is enabled. Scope FortiGate. Solution Topology: Enable Central SNAT by navigating to System -> Settings -> System Ope...

sbabu · 06-24-2025

Description This article describes how to configure NAT46 to allow IPv4 traffic to reach IPv6-only traffic when central SNAT is enabled. Scope FortiOS. Solution Topology: Enable Central SNAT by navigating to System -> Settings -> System Operation Set...

sbabu · 03-23-2025

Description This article describes how to troubleshoot the FortiSASE SAML error '400 Bad Request.'. Scope FortiSASE. Solution When the admin configured the FotiSASE with SAML SP configuration and selected 'Start test' to check if SAML authentication ...

sbabu · 02-27-2025

Description This article describes how to connect to different PoP's from end user computer for testing purpose. Scope FortiSASE, FortiClient. Solution When facing connectivity or traffic issue when connected to a nearest PoP, try to connect to a dif...

sbabu · 02-05-2025

Description This article describes how to fix Error: AADSTS50011 while connecting to FortiSASE VPN, which is configured with SAML SSO. Scope FortiClient, FortiSASE, Azure. Solution This error occurs if the redirect URI configured in the FortiSASE and...

sbabu · 09-28-2024

HI @Umesh I see that you have a query related to SD-WAN. In FortiGate, the route preference will be first policy route and then SD-WAN routes. Hence you should have a default route pointing toward the SD-WAN virtual interface this will help to route ...

sbabu · 09-28-2024

Hi @ashik_k The issue with the captive portal is due to the latest update on Google Chrome. When we open the browser the connectivity test will happen with google.com which is HSTS sites. As a workaround, you can try accessing non-HSTS sites like exa...

sbabu · 09-03-2024

Yes, Fortigate accepts GARP

sbabu · 08-28-2024

HI @jefazo92 If you have a broadcast IP address you can create a firewall policy with deny action and place it top of allow rule.

sbabu · 08-27-2024

hi @yodiallo when the internet is failing, Please run the below-mentioned command to see what is happening with traffic. Trace logs:- > diagnose debug reset> diagnose debug flow filter> diagnose debug flow filter saddr x.x.x.x -- source address> diag...

User Statistics

User Activity

Technical Tip: How to configure NAT64 to allow IPv6 traffic to reach IPv4-only traffic domain when central SNAT is enabled

Technical Tip: How to configure NAT46 to allow IPv4 traffic to reach IPv6-only traffic when central SNAT is enabled

Technical Tip: FortiSASE SAML error '400 Bad request.'

Technical Tip: FortiSASE how to connect to different PoP's from end user machine for test purpose

Troubleshooting Tip: FortiSASE Azure SAML SSO Issue while logging, 'ERROR - AADSTS50011'

Re: SDWAN (with two ISP)

Re: Captive portal issue

Re: does Fortigate accept gratuitous arp?

Re: Can directed broadcast be disabled in a Fortigate?

Re: I have a problem that I can't understand.

Technical Tip: How to troubleshoot HSTS captive po...

Technical Tip: How to configure an internal IPv6 t...

Technical Tip: Dial_up Native VPN (L2TP) is no lon...

Technical Tip: How to configure NAT64 to allow IPv...

Technical Tip: FortiSASE SAML error '400 Bad reque...

KCS

User Statistics

User Activity

You are leaving our website