Re: memory conserve threshold values are hardcoded...

dkochhar · 03-02-2025

Description This article describes how to resolve the HA status 'Unknown' error. Scope FortiGate. Solution The GUI is showing the HA status as 'Unknown':The possible causes of this are as follows: The Secondary FortiGate is running a different firmwa...

dkochhar · 12-06-2024

Description This article describes how to block ICMP timestamps and replies for internal traffic that originates from behind the FortiGate. Scope FortiGate. Solution This article demonstrates an example of how to block ICMP timestamps and replies for...

dkochhar · 11-28-2024

Description This article describes why the status of an EMS connector shows as down for a downstream device in the security fabric after upgrading to 7.4.5. Scope FortiOS. Solution The status of the EMS connector shows as down in the GUI for a downst...

dkochhar · 10-20-2024

Description This article describes how to fix DNS-related issues while configuring the GCP SDN connector. Scope FortiGate (This applies to FortiGate hosted on the google platform only). Solution For configuring the GCP connector, Refer to: Configurin...

dkochhar · 08-18-2024

Description This article describes how to diagnose and fix an issue where the user receives a FortiToken license error with code -7566 while importing a FortiToken through the CLI. Scope FortiGate. Solution When trying to import FortiToken from GUI, ...

dkochhar · 11-04-2024

@Knuppel1983 Unfortunately, this is a global feature. This setting is not available per tunnel for now.

dkochhar · 10-30-2024

@kamarale The Poll works for the FSSO agent. If you have the FSSO agents installed then it pools the additional information from the server. If you cannot install the FSSO agent therefore we can continue adding the LDAP server from the FortiGate GUI ...

dkochhar · 10-30-2024

@babarmunir Can you please attach the crash logs.Moreover, please run the following commands if again it goes into conserve mode before rebooting the device:get system statusget system performance status <----- Use this command three times leaving a ...

dkochhar · 10-26-2024

@moverall2 Can you please confirm your Forticlient version ?

dkochhar · 10-26-2024

Please try to change the fortiguard settings to these: config system fortiguard set fortiguard-anycast disable set protocol udp set port 53 set sdns-server-ip 208.91.112.220 set source-ip end

User Statistics

User Activity

Troubleshooting Tip: HA status 'Unknown'

Technical Tip: How to block ICMP timestamp and replies for internal traffic

Technical Tip: EMS connector issue after upgrading to v7.4.5, 'Certificate callback error -1: Error (-1@_check_verify_ems_ca:759' seen in debugs'

Technical Tip: GCP SDN connector DNS connectivity issue

Troubleshooting Tip: Unable to import mobile FortiTokens ('import fortitoken license error: -7566)

Re: IPsec TCP port per tunnel

Re: Fortigate - Explicit proxy with Kerberos