Troubleshooting Tip: EMS certificate not trusted w...

mle2802 · 12-12-2024

Description This article describes how to troubleshoot the issue with ZTNA traffic that is not forwarded to the real server. Scope FortiGate and FortiClient. Solution ZTNA traffic is allowed by the correct policy, however, it is terminated at FortiGa...

mle2802 · 12-09-2024

Description This article describes how to fix the issue with IPsec VPN getting stuck in the connecting state when using DUO SAML for authentication and an IKE debug shows 'EAP failure'. Scope FortiGate and DUO. Solution When configuring IPsec VPN Dia...

mle2802 · 11-21-2024

Description This article describes how to troubleshoot the slow authentication process with SSL VPN when using the MFA Radius server. Scope FortiGate. Solution Users experience slow delays in MFA authentication when connecting to SSL VPN on FortiClie...

mle2802 · 11-20-2024

Description This article describes how to verify the connectivity status between FortiGate and a TFTP server when loading an image after formatting the device. Scope FortiGate. Solution After formatting a FortiGate and using the TFTP server to load a...

mle2802 · 11-20-2024

Description This article describes how to troubleshoot the error 'Wrong Credentials' when using Azure SAML SSO with IPsec Dial-up VPN. Scope FortiGate. Solution When connecting to IPsec Dial-up VPN using Azure SAML SSO, the error 'wrong credentials' ...

mle2802 · 11-25-2024

Hi @Marcos_FDS1012,In case FortiGate on this side is doing DHCP, you can specify DNS server as remote side so you do not need to manually specify DNS.Regards,

mle2802 · 11-22-2024

Hi @HyTronix,You can refer to this document for more information https://community.fortinet.com/t5/FortiGate/Technical-Tip-Implement-Source-NAT-for-IPsec-interface/ta-p/224533

mle2802 · 10-25-2024

Hi @pat77550,In addition to DHCP debug, can you please also run packet capture on FortiGate on port 67 and 68 when try to renew DHCP lease?Regards,

mle2802 · 10-22-2024

Hi @RolandBaumgaertner72,On FortiGate LDAP server config, can you try to test the username/password and see first of all if it is able to authenticate? Regards,

mle2802 · 10-17-2024

Good day Aadar,For IPS package file, please create TAC case and we would be more than happy to provide you the requested one.Regards,Minh

User Statistics

User Activity

Troubleshooting Tip: ZTNA does not forward traffic to real server

Technical Tip: Error 'EAP failure' with IPsec Dial-Up VPN using remote groups

Troubleshooting Tip: Slow SSL VPN authentication with MFA Radius server

Troubleshooting Tip: How to check connectivity status with TFTP server for loading FortiGate image

Troubleshooting Tip: Error 'Wrong Credentials' when using multiple IPsec Dial-up VPNs

Re: VPN IPSec - DNS

Re: Site to Site IPSEC between to FortiGates - SNAT Question

Re: isssue to access internet

Re: SSL VPN Connection Error with LDAP

Re: IPS signatures file required

Troubleshooting Tip: EMS certificate not trusted w...

Re: Webpage not open "TCP reset from client"

Re: Can't aggregate port1 and port2 in FG-201F

Re: Fortigate SD-WAN in one side within another Fi...

Re: Disabling VDOM mode affects policies?

Re: VPN IPSec - DNS

Re: Firewall blocked Fortinet Single Sing On Agent...

Re: Fortinet images turn on and off in EVE-Ng

Re: Fortinet images turn on and off in EVE-Ng

Re: Policy based - URL categories does't work

KCS