Description This article describes the case when there is
TS_UNACCEPTABLE coming up during IKE debugs. Scope IKEv2 IPSec tunnel on
FortiGate. Solution When troubleshooting IKEv2 IPSec tunnels, the
following error in IKE debugs can be observed: ike V=...
Description This article covers a specific scenario where, due to a PFS
mismatch, an IKEv2 tunnel will result in a tunnel flap at each IPSec
rekey even though it comes up initially. Scope FortiGate, IPSec tunnel,
IKEv2, PFS. Solution In contrast to I...
Description This article addresses how to disable AES CBC ciphers for
SSL VPN and Admin GUI Access (HTTPS). Scope FortiGate, SSL VPN, HTTPS,
GUI, CBC (Cipher-Block-Chaining). Solution As vulnerability scanners are
starting to report AES CBC ciphers a...