Troubleshooting TIp: IPsec issues encountered with...

princes · 12-06-2024

Description This article describes the behavior of IPsec tunnels in transport mode. Scope FortiGate. Solution The IPsec tunnel default configuration will ask the local and remote subnets to allow over the tunnel. Without mentioning these addresses or...

princes · 11-15-2024

Description This article describes the issue with certificates in Push notifications on mobile Tokens. Scope FortiGate, FortiToken. Solution After configuring the FTM-Push settings the user gets SSL secure connection failure, this is triggered due to...

princes · 10-21-2024

Description This article describes that If users are using FortiClient to connect with SSL VPN configured on the FortiGate then have mentioned primary and secondary remote gateway for failover in case the primary goes down. Now in this setup, the con...

princes · 09-20-2024

Description This article describes how to configure a transparent proxy in FortiGate to forward specific destination traffic to Web Proxy Forwarding Servers. Scope All supported versions of FortiGate (make sure the FortiGate support for proxies - som...

princes · 09-12-2024

Description This article provides information about local out traffic like sending backup to the TFTP server from a specific source address. Scope FortiGate. Solution By default, if the FortiGate has to send any self-generated traffic, it would choos...

princes · 01-16-2024

Hello, Seems you are moving to the new product, we do have the feature you mentioned. The difference is we call it as central NAT , it is up to you how you want to utilize it. If you operate in central NAT mode you can have all your NAT rules in one ...

princes · 01-16-2024

Hello , I think you want to block geolocation address while allowing it for a particular location or source range. You can achieve this by simply using local in policy. By default the action is to deny for these policies. So you have to follow the be...

princes · 01-16-2024

Hello, As we understood you have already working Vlan subnets which needs to be modified . Best way is to create Vlan but do not assign IP for the moment (put unused dummy ip). However as you mentioned you already have static addresses on Printer and...

princes · 12-06-2023

Hi , It depends on you, if your downstream switches have multiple Vlans configured and you just have a reverse route pointed towards the SW on Fortigate,,,in this case you can simply create a rule with your physical interfaces. And if you have vlans ...

princes · 12-06-2023

Hi, It is expected only if you use SDWAN. However for your VIP (DNAT) configuration you can map your dedicated interfaces . Your wan interfaces would be listening to the incoming requests from outside. Yu can also mention it as 0.0.0.0 as external on...

User Statistics

User Activity

Technical Tip: IPsec phase-2 selectors deleted automatically while changing the encapsulation mode to Transport mode

Technical Tip: FortiToken push notifications failed with secure ssl connect failed error

Technical Tip: Auto failover to secondary SSL VPN remote gateway not working in FortiClient

Technical TIp: URL category-based destination forwarding in a transparent proxy with FortiGate

Technical Tip: Local-OUT traffic with specified source

Re: Incoming NAT

Re: Geo location ip blocking for particular server

Re: Network Segmentation - VLAN Plan

Re: Getting SubInterfaces To Go to Internet

Re: WAN Interface not shown in Firewall Policy

Troubleshooting TIp: IPsec issues encountered with...

Technical Tip: LDAP Authentication with MAC addres...

Technical Tip: Securing a captive portal enabled i...

Technical Tip: IPsec phase-2 selectors deleted aut...

Technical Tip: FortiToken push notifications faile...

KCS