Description This article describes that when Firewall policies are in a
flow-based inspection, the FortiGuard block page does not display. Scope
FortiGate, FortiOS v7.0.x version. Solution The FortiGate devices
running on FortiOS v7.0.x, are configur...
Description This article describes how to add the existing address
objects on the address groups created by IPsec VPN Wizard. Scope
FortiGate. Solution When creating an IPSEC VPN using a VPN Wizard, the
address groups are created with a 'Static route...
Description This article describes why a static route or default route
outgoing with SD-WAN Zone cannot be assigned an administrative distance
of 10 on a FortiGate. Scope FortiGate. Solution The following example
explains that a static route or defau...
Description This article describes how to delete the configuration
object on FortiGate, this example focuses on deleting an address group
object. Scope FortiOS. Solution In the following example, it is not
possible to delete a configuration object (f...
Description This article describes how to resolve the Certificate Errors
for explicit web proxy users. Scope FortiGate. Solution After
configuring explicit proxy with Authentication and if users get the
certificate error. To resolve the issue check t...
Hi Tsug,In FortiGate, firewall policies are processed in a top‐down
order, and FSSO is a passive authentication method. This means that if a
user is already authenticated, traffic from that user will match the
FSSO rule. If the user isn’t authenticat...