Re: Invalid DHCP range. Start address is greater t...

akileshc · 01-07-2025

Description This article describes the behavior and configuration details for setting the MTU on VXLAN interfaces when using a physical or loopback interface as the underlying interface. This document also provides step-by-step guidance on adjusting ...

akileshc · 12-13-2024

Description This article describes that in OSPF, Type 5 LSAs (AS-external-LSA) are used to advertise external routes into the OSPF domain. When a route is redistributed into OSPF from BGP, the default behavior is to set the next-hop IP address of the...

akileshc · 10-15-2024

Description This article describes the behavior of self-generated traffic in FortiGate devices with regards to Virtual Routing and Forwarding (VRF) instances. It outlines how FortiGate selects routes when multiple paths to a specific destination exis...

akileshc · 09-26-2024

Description This article describes the default behavior and settings of 'set passive' specifically in the BGP neighbor-group. Scope FortiGate. Solution The BGP neighbor group is a collection of BGP neighbors that share common configurations and polic...

akileshc · 09-20-2024

Description This article describes how to enable and capture debug information for troubleshooting IKE negotiation failures on a FortiGate device. IKE debugging can be useful in identifying configuration errors, negotiation failures, and issues relat...

akileshc · 10-27-2024

Hello Tanlee, By default, SD-WAN rules will select a member only if there’s a valid route to the destination through that member. Since your WAN2 interface has an administrative distance (AD) of 10, and WAN1 with administrative distance (AD) of 5; th...

akileshc · 10-27-2024

Hello Salam, To differentiate connections or route traffic specifically to various internal servers offering different services, the extport must be configured identically in your case. In the example specified above, the extport has been mistakenly ...

akileshc · 10-27-2024

Hello Salam, To achieve this configuration on FortiGate, follow these steps using FortiGate's Virtual IPs (VIPs) and Firewall Policies: 1. Create VIPs: Each VIP entry maps the incoming requests on the specified external IP (your public IP) to the des...

akileshc · 10-26-2024

Hi Usman, The FortiGuard Antivirus Service uses Content Pattern Recognition Language (CPRL) to boost both the accuracy and speed of threat detection, going beyond what traditional signature-based methods can offer, especially for more sophisticated t...

akileshc · 10-21-2024

Hello, Yes, your understanding is correct. In order for the FortiGate antivirus profile to scan encrypted files, SSL/SSH decryption must be enabled to decrypt the traffic for inspection. Without decryption, the antivirus profile cannot scan encrypted...

User Statistics

User Activity

Technical Tip: Understanding Maximum MTU on VXLAN Interfaces

Technical Tip: Configuring FortiGate to Use Its Interface IP Address as the Forwarder Address in OSPF Type 5 LSA

Technical Tip: Route Selection Process for Self-Generated Traffic in Relation to VRFs

Technical Tip: Functionality of set passive in BGP Neighbor Groups

Technical Tip: How to enable IKE debugging with various debug levels using a bitmask to isolate specific types of information for troubleshooting IKE negotiation failures

Re: FG 81E - SD-wan rule with manual select member does not hit.

Re: Publishsing multiple Web sites using FortiGate and FortiWeb and only one public IP

Re: Publishsing multiple Web sites using FortiGate and FortiWeb and only one public IP

Re: Questions regarding antivirus profile ?

Re: Questions regarding antivirus profile ?

Re: Invalid DHCP range. Start address is greater t...

Re: How to show current foreground/background acti...

Technical Tip: Configuring NAT64 using External IP...

Re: Hub and Spoke SDWAN? (remote and local IP on v...

Technical Tip: Understanding Maximum MTU on VXLAN ...

Re: Multicast Issue in Layer 2: VLC Not Receiving ...

Re: Invalid DHCP range. Start address is greater t...

Re: Please Help Me Get Fiber IPv6 working

Re: Why is an event marked as Unhandled if DNS req...

Re: Fortigate60D, following file is found.

KCS

User Statistics

User Activity

You are leaving our website