Re: SSL Deep Inspection - Google Chrome

smaruvala · 12-11-2024

Description This article explains the case sensitivity nature of the group name in the HA configuration. Scope FortiGate. Solution One of the conditions to establish the HA between 2 FortiGates is to have the same Group name. The Group name is case-s...

smaruvala · 12-11-2024

Description This article explains how the FortiGate handles the DNS Dynamic update packet in proxy mode. This type of DNS packet is generated when a user executes the command 'ipconfig /registerdns'. Scope FortiGate. Solution In Windows machines, the...

smaruvala · 08-21-2024

Description This article explains how to interpret the SMART data to identify the power cycle count in a FortiGate Firewall. Scope FortiGate. Solution When the command 'diagnose sys logdisk smart' is executed in the FortiGate Firewall, it displays th...

smaruvala · 07-07-2024

Description This article describes why the policy is not updating the hit and bytes count in a policy-based VPN. Scope Policy-based VPN. Solution The firewall is configured with a policy-based VPN with the 'set inbound enable' command. Below is an ex...

smaruvala · 05-23-2024

Description This article describes details about the challenge ACK and how FortiGate handles that packet. Scope FortiGate. Solution In the TCP handshake generally, 3 packets are exchanged for the connection establishment and they are either SYN, SYN-...

smaruvala · 11-17-2024

Hi, - Is there any change in the network connection such as wifi going down and coming up? - Is the Auto Connect enabled in the FortiClient configuration? Regards, Shiva

smaruvala · 07-18-2024

Hi, - Are you having access of the firewall which is acting as the SSL VPN gateway or you are trying to block the communication in a passthrough fortigate? - If you are trying to block the communication in a passthrough fortigate then you can create ...

smaruvala · 07-18-2024

Hi, - Was the issue seen in GUI or CLI? - Were you able to see the policy with the correct source and destination in the CLI by running the command "show firewall policy"? Regards, Shiva

smaruvala · 07-11-2024

Hi, For which type of traffic you are observing the error? Are you seeing ip-conn error for UDP/DNS traffic or ping traffic or TCP traffic? default session timeout is 3600 seconds. But if the session is not established and it is half open state then ...

smaruvala · 07-10-2024

Hi, - What is the FortiGate version you are running? - Is the Geo IP database updated or outdated? You can refer the below KB to verify if you have the latest GeoIP database. https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-update-the...

User Statistics

User Activity

Technical Tip: Unable to form the HA cluster in FortiGate due to case sensitivity of the Group Name

Technical Tip: Handling of the DNS Dynamic update packet by FortiGate in Proxy mode

Technical Tip: Identifying the Power Cycle count using the SMART data

Technical Tip: Hit and Bytes count does not increment in Policy-based VPN

Technical Tip: Handling of Challenge ACK packet by FortiGate

Re: FortiClient 7.4.1 is automatically prompting to connect to VPN

Re: Blocking FortiClient Application

Re: No Destination Interface in Policies after Update from 7.4.3 to 7.4.4

Re: Why are there many ip connection error?

Re: Getting an error when running the command 'diagnose geoip geoip-query <public ip>'

Re: SSL Deep Inspection - Google Chrome

Re: Url list to connect fortisase

Re: SSL encrypted syslog from Fortigate 40F to Sys...

Re: Does Fortigate manipulate a certificate traffi...

Re: VPN not working on mobile devices after 7.0.14...

Re: FortiGate Send SNMP traps when automation stit...

Re: FortiGate Send SNMP traps when automation stit...

Re: Fortigate send UDP 8014 packets on WAN interfa...

Re: what "This can be a challenge ack packet" mean...

Re: VPN IPsec with dh 32