Hi, I need to understand the risks of enabling tcp-session-without-syn
for asymmetric environment. Can someone help to explain to me all the
risks if I enable this? Thank you
Hi,I'm simulating FortiGate 7.2.8 in PNet and I found an issue with
forwarding packet or maybe routing issue.The topology as attached below
The R7 and R8 are able to ping the IP in FortiGate interface.R7#ping
20.20.20.1 Type escape sequence to abort....
Hi, I need advice regarding using FGSP in dynamic tunnel VPN in SD-WAN.I
read the admin guide
below:https://docs.fortinet.com/document/fortigate/7.2.8/administration-guide/892338/fgsp-per-tunnel-failover-for-ipsecAnd
I have question if I'm using dyna...
Hi,I want to know what are the impacts to existing dial-up clients when
I extend/expand the netmask (say from 255.255.255.0 to 255.255.252.0) in
dynamic Dial-Up VPN IPSec on the Hub?Maybe someone can give insight
about this. Thank youAri
Hi,I'm interested with session synchronize between FGCP cluster in
different data center.But I'm unable to find more details about that,
such as:1. What is the drawback of using this?2. What are the
limitations?3. What are the requirements to be able...
Hi,Thank you for the insight about the feature risk. If I have 1
FortiGate with 2 uplinks to ISP, where the traffic outgoing to ISP-1 and
return traffic going to ISP-2, do I need to enable
tcp-session-without-syn to prevent traffic drop of different ...
Hi, I just tried on lower version and the ping is success between
routers. Here is the version that success, with same configuration as
before. FortiGate-VM64-KVM # get sys status Version: FortiGate-VM64-KVM
v7.2.0,build1157,220331 (GA.F) Virus-DB: 1...
Hi,It's replied. Also I have configured default route on both
routers.FortiGate-VM64-KVM # execute ping 20.20.20.2 PING 20.20.20.2
(20.20.20.2): 56 data bytes 64 bytes from 20.20.20.2: icmp_seq=0 ttl=255
time=4.6 ms 64 bytes from 20.20.20.2: icmp_seq...
Hi, No, I don't configure any VIP.Btw, in version 7.2 does it need
purchased license on FortiGate so that the FGT can forward the traffic?
I just random thought.I haven't tried on lower version yet, will be try
later. Thanks
