Re: SSL Deep Inspection - Google Chrome

smaruvala · 08-21-2024

Description This article explains how to interpret the SMART data to identify the power cycle count in a FortiGate Firewall. Scope FortiGate. Solution When the command 'diagnose sys logdisk smart' is executed in the FortiGate Firewall, it displays th...

smaruvala · 07-07-2024

Description This article describes why the policy is not updating the hit and bytes count in a policy-based VPN. Scope Policy-based VPN. Solution The firewall is configured with a policy-based VPN with the 'set inbound enable' command. Below is an ex...

smaruvala · 05-23-2024

Description This article describes details about the challenge ACK and how FortiGate handles that packet. Scope FortiGate. Solution In the TCP handshake generally, 3 packets are exchanged for the connection establishment and they are either SYN, SYN-...

smaruvala · 05-23-2024

Description This article describes how redundant policy-based VPN can be configured using the automation stitches in the FortiGate Firewall. Scope FortiGate. Solution The network comprises of a data center (DC) and two sites called Site-A and Site-B....

smaruvala · 05-01-2024

Description This article describes important information regarding the SNMP OID which can be used to retrieve the FortiClient EMS connectivity status from a FortiGate Firewall. Scope FortiOS version 7.4.2. Solution The connectivity status between the...

smaruvala · 07-18-2024

Hi, - Are you having access of the firewall which is acting as the SSL VPN gateway or you are trying to block the communication in a passthrough fortigate? - If you are trying to block the communication in a passthrough fortigate then you can create ...

smaruvala · 07-18-2024

Hi, - Was the issue seen in GUI or CLI? - Were you able to see the policy with the correct source and destination in the CLI by running the command "show firewall policy"? Regards, Shiva

smaruvala · 07-11-2024

Hi, For which type of traffic you are observing the error? Are you seeing ip-conn error for UDP/DNS traffic or ping traffic or TCP traffic? default session timeout is 3600 seconds. But if the session is not established and it is half open state then ...

smaruvala · 07-10-2024

Hi, - What is the FortiGate version you are running? - Is the Geo IP database updated or outdated? You can refer the below KB to verify if you have the latest GeoIP database. https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-update-the...

smaruvala · 07-10-2024

Hi, Currently, this is not supported. We have a feature request but the feature is not available in any version yet. Regards, Shiva

User Statistics

User Activity

Technical Tip: Identifying the Power Cycle count using the SMART data

Technical Tip: Hit and Bytes count does not increment in Policy-based VPN

Technical Tip: Handling of Challenge ACK packet by FortiGate

Technical Tip: Redundant Policy Based VPN using the Automation Stitch

Technical Tip: SNMP OID for FortiClient EMS connection status

Re: Blocking FortiClient Application

Re: No Destination Interface in Policies after Update from 7.4.3 to 7.4.4

Re: Why are there many ip connection error?

Re: Getting an error when running the command 'diagnose geoip geoip-query <public ip>'

Re: Fortigate destination policy with user

Re: SSL Deep Inspection - Google Chrome

Re: Url list to connect fortisase

Re: SSL encrypted syslog from Fortigate 40F to Sys...

Re: Does Fortigate manipulate a certificate traffi...

Re: VPN not working on mobile devices after 7.0.14...

Re: FortiGate Send SNMP traps when automation stit...

Re: FortiGate Send SNMP traps when automation stit...

Re: Fortigate send UDP 8014 packets on WAN interfa...

Re: what "This can be a challenge ack packet" mean...

Re: VPN IPsec with dh 32