Re: Setting up FortiGate Web Authentication and SA...

Ade_23 · 04-02-2025

Description This article describes possible issues that result in 'Negotiate SA Error: [11895]'. Scope FortiGate. Solution When troubleshooting IPSec VPN issues on the FortiGate, it is possible to receive 'Negotiate SA Error: [11895]'. This is likely...

Ade_23 · 03-14-2025

Description This article explains why RCS (Rich Communication Services) text messaging between Apple and Android phones could be blocked by the FortiGate firewall. Scope FortiGate. Solution RCS (Rich Communication Services) messaging is a mobile carr...

Ade_23 · 03-14-2025

Description This article provides a distinction between half (Client<->FortiGate) and full SSL offloading methods when configuring a virtual server. Scope FortiGate. Solution On the FortiGate, when configuring a virtual server to load-balance secure ...

Ade_23 · 02-17-2025

Description This article is a guide on providing read-only access to UTM profiles and nothing else on the firewall. Scope All FortiOS versions. Solution In some environments, it may be required to give read-only access to the Security profiles (UTM) ...

Ade_23 · 01-14-2025

Description This article describes what to do when an intrusion prevention scanning failure is seen on devices behind a FortiGate or FortiProxy device. Scope FortiGate, FortiProxy. Solution It is possible to get the following error message when tryin...

Ade_23 · 10-31-2024

Hello @heyyo, Here is an article on enabling the sdwan interface: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Enable-and-disable-SD-WAN-options/ta-p/193768 Do you have any interfaces in that zone as asked by @Ricky?

Ade_23 · 10-17-2024

Hello julianhaines, First of all, you do not need a rule to allow traffic in for SAML authentication. Please run a saml debug on the FortiGate to see if you get any output.? Also, please enable captive portal with IP 0.0.0.0 under authentication sett...

Ade_23 · 08-30-2024

Hello @boneyard . The short answer is No. there is no way to see the number of hits for routing objects. The best way to see if they are working is by the effect of their application.

Ade_23 · 08-16-2024

Hello, You cannot use the same SSO instance for SSLVPN and outbound authentication on the same FortiGate. They would have to be two different instances.

Ade_23 · 08-07-2024

Set up an ip pool for that internal box using the wan interface IP and see if it works

User Statistics

User Activity

Technical Tip: No Proposal Chosen. 'Negotiate SA Error: [11895]'

Technical Tip: RCS messages are blocked between IOS and Android phones on FortiGate

Technical Tip: Difference Between SSL Half and Full Offloading

Technical Tip: Create an Admin account with just read-only access to UTM profiles.

Technical Tip: Intrusion Prevention Scanning Failure

Re: SD-WAN Zone (virtual-wan-link) with Disabled Status