Technical Tip: Configuring access lists

bvata · 06-18-2020

DescriptionWhen a user tries connect two FortiGates using fabric connection, the connection between these two units cannot be established due to unknown certificate error.This article describes how to troubleshot this error.Troubleshooting command.# ...

bvata · 12-24-2019

Description This article describes how to configure access list on FortiGate.Solution Access lists are implemented after TCP/IP Stack and before the DOS policy sensor on NP Processors (not NP Lite). Configuration can be performed from the CLI: config...

bvata · 11-26-2019

DescriptionThis article explains how NAT Traversal and Twin connections in IPsec Tunnel are working.SolutionIn certain scenarios, when multiple DialUP client behind the same NAT IP will negotiate on same remote public IP address will cause twin conne...

bvata · 09-17-2019

DescriptionThis article explains the behavior of FortiGate when the feature Host-Regex is used in Proxy Address.Solution 1) If a hostname is used in Host Regex Proxy Address, the page will be loaded successfully if it matches the pattern and the acti...

bvata · 09-11-2019

DescriptionThis article describes how to enable multiple certificates for inbound SSL Inspection.Example: If there is a Server behing FortiGate and it is needed to allow external users to access different services.Useful link:Fortinet documentation:R...

User Statistics

User Activity

Technical Tip: Security fabric connection cannot be established due to unknown certificate error

Technical Tip: Configuring access lists

Technical Tip: NAT traversal and twin connections in IPsec Tunnel

Technical Tip: Using host regex proxy address in firewall proxy policy

Technical Tip: How to enable multiple certificates for inbound SSL Inspection

Technical Tip: Configuring access lists

Technical Tip: NAT traversal and twin connections ...

KCS