Description This article describes the issue of being unable to import a
PKCS#12 certificate on a FortiGate firewall, and provides a step-by-step
solution to resolve the problem. Scope FortiGate. Solution In some
cases, when importing a PKCS#12 certi...
Description This article describes an issue where the FortiGate is
unable to contact the RADIUS server even though the
message-authenticator attribute is enabled on both the NPS server and
the FortiGate. Scope FortiGate v7.2.10+, v7.4.5+ and v7.6.1+ ...
Description This article describes where to procure the driver for a
Fortinet-branded console cable included in the packaging. Scope
Fortinet-branded USB-to-RJ45 console cable. Solution Fortinet device
packages will often include a serial console cab...
Description This article describes what changes to make to fix the error
'Unable to connect to VPN because tunnel configuration is unsupported'
when connecting to IPsec VPNs from a MacOS device. Scope FortiClient
(MacOS) 7.4.2. Solution When connecti...
Description This article describes possible issues that result in 'No
Proposal Chosen. Negotiate SA Error'. Scope FortiGate. Solution When
troubleshooting IPsec VPN issues on the FortiGate using the IKE debug
(Reference: Troubleshooting Tip: IPsec Tu...
Hello @heyyo, Here is an article on enabling the sdwan interface:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Enable-and-disable-SD-WAN-options/ta-p/193768
Do you have any interfaces in that zone as asked by @Ricky?
Hello julianhaines, First of all, you do not need a rule to allow
traffic in for SAML authentication. Please run a saml debug on the
FortiGate to see if you get any output.? Also, please enable captive
portal with IP 0.0.0.0 under authentication sett...
Hello @boneyard . The short answer is No. there is no way to see the
number of hits for routing objects. The best way to see if they are
working is by the effect of their application.
Hello, You cannot use the same SSO instance for SSLVPN and outbound
authentication on the same FortiGate. They would have to be two
different instances.
