Re: redirect internet traffic over IPSec tunnel

HiralShah · 08-22-2024

Description This article describes how to enable only HTTP Administrative Access on the FortiGate interface. Scope All FortiGate firmware. Solution Unable to select only HTTP as administrative access on FortiGate: To resolve this issue go to System -...

HiralShah · 02-02-2024

Description This article describes the case when it is desired to access the VPN using web mode but it is showing 400 or 403 Forbidden error while SSL VPN is configured with SAML authentication. Scope FortiGate. Solution SSL VPN web mode gets the err...

HiralShah · 01-09-2024

Description This article describes the case when the admin cannot find which user is connected with the IPsec dialup tunnel. Scope FortiGate, all firmware. Solution The admin needs to know which user is connected with the IPsec dialup tunnel successf...

HiralShah · 11-27-2023

Description This article describes how to solve an issue where, in some cases, Windows systems think the FortiGate is a new network each time it reboots. In these cases, the issue is that the software switch is getting a different MAC address with ea...

HiralShah · 10-12-2023

Description This article discusses steps that need to be taken to ensure everything else in a FortiGate setup works as expected after changing the WAN IP. Scope FortiGate. Solution To change the WAN IP to a new IP address, make sure to make changes a...

HiralShah · 10-22-2024

Hello @RolandBaumgaertner72 Are you using any MFA for LDAP users? Please check this document if forticlient is stopping at 48% it seems issue with MFA. https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Possible-reasons-for-FortiClient-S...

HiralShah · 10-17-2024

Hello @raffaeledp Thank you for sharing your configuration. Then this is your expected behavior, if you want to use user group in the policy just select option inherit from policy in the XAUTH user group

HiralShah · 10-17-2024

Hello @raffaeledp Can you please provide screenshot of your tunnel configuration? is it set to IKE mode 1 or 2? That is expected behavior if you have xauth set to Auto server and User group mentioned in the ipsec dialup tunnel. You can check below do...

HiralShah · 10-15-2024

Hello @Digitaltree Can you please provide information that what forticlient version you are using? Also did you try to install the forticlient from support portal?

HiralShah · 10-08-2024

Hello @BKR Can you please make sure VLAN subnet is added in accessible network and policy has been created from IPSec tunnel to vlan and vice versa.

User Statistics

User Activity

Technical Tip: How to select only HTTP option for administrative access of the FortiGate

Technical Tip: SSL VPN web mode showing '403 Forbidden' error

Technical Tip: Check which user is connected with IPsec dialup tunnel

Troubleshooting Tip: Each time FortiGate reboots, the software switch's MAC address changes

Technical Tip: Other necessary changes to make when changing WAN IP

Re: SSL VPN Connection Error with LDAP

Re: Can't filter firewall policy based on user group

Re: Can't filter firewall policy based on user group

Re: FortiClient VPN on MacOs Sequoia (15) not working

Re: IPsec VPN - Can't access internal network

Re: redirect internet traffic over IPSec tunnel

Re: Websites are not loading - Fortigate 120g

Re: After changing a VLAN ... SSL VPN traffic is n...

Technical Tip: Microsoft Teams calls dropping

Re: SSL VPN Connection Error with LDAP

Re: Can't filter firewall policy based on user gro...

Re: redirect internet traffic over IPSec tunnel

KCS