About ijeremic

ijeremic · 04-27-2022

Description This article describes how the missing parameter 'set local-gw' under the phase1 interface can trigger issues between two IPsec endpoints. Command 'set local-gw A.B.C.D' defines the source address used for self-originated outbound IKE pac...

ijeremic · 04-25-2022

Description In case it is required to block ICMP Unreachable messages (Type3) due to security reasons (e.g. preventing BlackNurse attack) FortiGate administrator can use interface-policy to block ICMP type 3 messages. This article describes how to co...

User Statistics

User Activity

Technical Tip: Missing Phase1 parameter 'set local-gw' triggers 'unknown SPI' issue

Technical Tip : Blocking ICMP Unreachable Messages by using interface-policy

KCS