Re: what is the result if an SD-WAN member interfa...

wmichael · 12-05-2024

Description This article describes the errors 'Wrong image for this model' and 'invalid compressed format (err=2)' when uploading a firmware image to a FortiGate via TFTP server and how to troubleshoot the issue. Scope FortiGate. Solution For informa...

wmichael · 11-18-2024

Description This article describes how to troubleshoot an issue where the FortiGate’s FortiClient EMS fabric connector is showing down with the error 'EMS certificate not authorized'. Scope FortiGate, FortiClient EMS. Solution This error occurs when ...

wmichael · 11-06-2024

Description This article explains how to configure the FortiAnalyzer or FortiManager Fabric Connectors when there is over lapping subnets over a site-to-site VPN. Scope FortiGate. Solution This article assumes the NATing between networks is correct a...

wmichael · 10-28-2024

Description This article describes how to configure a Link-Monitor with TWAMP protocol. Scope FortiGate. Solution The Two-Way Active Measurement Protocol (TWAMP) is a protocol that is used for measuring network performance between devices. The FortiG...

wmichael · 10-22-2024

Description This article describes how to configure Auto-connectto IPsec VPN using Entra ID logon session information with multiple user groups in the firewall policies instead of configuring the group on the IPsec tunnel. Scope FortiGate v7.2.9, v7....

wmichael · 11-28-2024

Hello, You can use the command ' diagnose sys mpstat ' to monitor utilization over a period of time. Delay is in seconds, loops is the number of times you want it to run.https://community.fortinet.com/t5/FortiGate/Technical-Tip-Deprecated-of-command...

wmichael · 11-26-2024

Lowest cost SLA strategy, the FortiGate will choose the link with the lowest cost that is meeting the performance SLA. The packet loss (5 consecutive lost) will determine if the link is active or inactive. If you have "update static route" configured...

wmichael · 11-15-2024

Hello Sozo_Admin Ensure logging on the implicit deny is enabled. See the following article: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Implicit-deny-logs/ta-p/194602

wmichael · 10-21-2024

That's great to hear. With NAT enabled on the policies the traffic must be matching phase2 of the tunnel now.

wmichael · 10-18-2024

That message is indicating that the session is not being offloaded. https://docs.fortinet.com/document/fortigate/7.6.0/hardware-acceleration/734139/diagnose-sys-session-list-and-no-ofld-reason-field-np7-session-information not-established A TCP sessi...

User Statistics

User Activity

Troubleshooting Tip: Error when loading firmware image via TFTP server to FortiGate

Troubleshooting Tip: EMS certificate not authorized

Technical Tip: Configuring FortiAnalyzer or FortiManager Fabric Connectors in an environment with site-to-site VPN with overlapping subnets

Technical Tip: Configuring a Link-Monitor with TWAMP probes

Technical Tip: Auto-connect to IPsec VPN using Entra ID logon session information using user groups in the firewall policies

Re: Fortigate CPU Utilization Time

Re: what is the result if an SD-WAN member interface is Down

Re: Fortigate not showing Deny logs

Re: Fortigate 100F ipsec between 2

Re: Fortigate 100F ipsec between 2

Re: what is the result if an SD-WAN member interfa...

Re: Fortigate CPU Utilization Time

Technical Tip: Using Zoom with IPv4 DoS Policy

Technical Tip: Neighbor Discovery Protocol (NDP) a...

KCS