Troubleshooting TIp: IPsec issues encountered with...

princes · 12-16-2025

Description This article describes how to configure and connect an external Threat block List to FortiGate without installing any third party web server application. Scope FortiGate. Solution In scenarios where no web server installation is possible,...

princes · 12-08-2025

Description This article explains how to generate a server certificate from FortiGate; the same certificate can be used for SSL VPN client or to secure web mode access. Scope FortiGate. Solution To remove a non-secure warning from SSL VPN web mode in...

princes · 11-25-2025

Description This article describes the behavior while manipulating the BGP inbound routes based on Local Preference. Scope FortiGate. Solution During BGP outbound path manipulation, Local Preference can be utilized. If routing table details are seen,...

princes · 11-12-2025

Description This article describes how an inaccurate DOS policy can impact the SD-WAN performance SLA of a member to be dead. Scope FortiGate Solution In an IPV4 DOS policy, there is a pattern for ICMP_FLOOD, which calculates the threshold based on t...

princes · 09-05-2025

Description This article describes different methods used for DNS probe in SD-WAN performance SLA. Scope FortiGate. Solution When the DNS is selected as the protocol for the performance SLA, the working is different from the Ping protocol. Considerin...

princes · 12-09-2025

Hi AlexFerenX, Kindly check the CPU usage for the device and verify if any particular core is going HIGH, if yes then it might cause similar issue. Refer below article for more detail: https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-H...

princes · 11-03-2025

Hi Zenhusen, Take the firewall CLI access through putty , configure a free port with IP address and enable DHCP services . Enable https on that interface, once configured connect a PC directly to that port and check if you get an IP through DHCP. Onc...

princes · 11-03-2025

Hi HT_JDC, It is difficult to tell the exact number since it is dependent on multiple factors like the medium and the scheme chosen. Thank you.

princes · 11-03-2025

Dear HT_JDC, The FEC is not measured by number of bytes, it is the ratio which measures the overhead which is dependent on the base payload. It may result in overall Bandwidth increase by the applied ratio. Best Regards,

princes · 09-22-2025

Hi, Would suggest you to have a look on below : https://community.fortinet.com/t5/FortiGate/Technical-Tip-VIP-IP-virtual-server-type-on-the-same-internal/ta-p/221782 Seems you are trying to achieve the same.

User Statistics

User Activity

Technical Tip: Connecting external Threat Feed server to FortiGate without installing a web server application in Windows

Technical Tip: Remove Certificate POP-UP message while connecting to SSL VPN

Technical Tip: Local Preference value is different in received-routes and BGP network table

Technical Tip: IPV4 DOS policy causing SD-WAN performance SLA to go down

Technical Tip: Different methods explained for DNS probe used in SD-WAN performance SLA

Re: "port_ha" drop count is increasing, ha1 and ha2 drop show 0 - why?

Re: cant connect to firewall web UI timeout issue

Re: IPsec Forward Error Correction

Re: IPsec Forward Error Correction

Re: Is it possible to map a vip to a vs?

Troubleshooting TIp: IPsec issues encountered with...

Technical Tip: LDAP Authentication with MAC addres...

Technical Tip: Securing a captive portal enabled i...

Technical Tip: Unable to resolve local FQDNs on Fo...

Technical Tip: IPsec phase-2 selectors deleted aut...

Re: VPN Site to Site

KCS

User Statistics

User Activity

You are leaving our website