Recently Updated Pages
SD-WAN Diagnostics
(2022-06-17) Problem SD-WAN no workie. Solution You can probably figure out information from some...
Read-Only Admin Profile
(2022-02-15) Problem I want a (or a bunch of) read-only admin(s) with global scope. Solution # co...
IPSA self test failed, disable IPSA!
(2022-01-17) Problem IPSA self test failed, disable IPSA! Solution FW # conf ips global FW (globa...
iPerf3 on Fortigates
(2021-06-16) Limited iPerf3 on Fortigates # diag traffictest client-intf port1 <----- Defi...
Displaying Logs From Console
(2021-07-20) Problem Display logs from a console session. Solution Select log source: # execute l...
CLI Restore Configuration
(2020-09-14) CLI Restore Configuration > execute restore config tftp <filename> <ip> > execute re...
LDAP lookup account considerations
(2022-02-08) Problem What do we have to do to permit the LDAP lookup account to be able to change...
Wifi 802.1x with LDAP Groups
(2019-04-10) Problem Wifi WPA/WPA2 access tests that depend on a LDAP (Active Directory) user gro...
VPN Debug
(2018-08-02) Problem Site to site VPN not coming up. Solution it depends what you would like to t...
Traffic Shaping Policy
(2019-07-08) Problem Traffic shaping wtf? Solution In 5.6, traffic shaping was removed from IPv4 ...
System Version from CLI
(2019-01-10) What firmware am I running? # get system status Version: FortiGate-60D v5.6.2,build1...
SSLVPN DNS Suffix
(2019-03-13) Problem SSLVPN users have to use FQDNs instead of short names when connecting to off...
SSL Security Settings
(2019-03-13) Problem Standard configuration for (more) secure crypto Solution config sys global ...
SSH Pubkey Login
(2018-12-19) Problem Want SSH Pubkey authentication for my AD-backed administrative user. Specifi...
Routing Table
(2019-05-28) Problem Routing table? Solution get router info routing-table all get router info ...
List DHCP Clients CLI
(2019-02-13) Problem Using the CLI, list current assigned DHCP leases. Solution For interface "in...
IPsec Not Passing Packets
(2019-09-12) Problem IPsec tunnel to another device (in this case, a Watchguard). Tunnel shows as...
FortiOS LLDP
(2019-01-22) Solution So apparently FortiGates can do LLDP, you just have to turn it on. config s...
VPN Ciphers, Encryption, DH Settings Recommendations
(2019-03-13) Problem What are the recommended settings for IPSEC VPNs? (Updated 25 April 2023) IK...
BGP Sessions
(2020-06-24) Problem Soft-bounce bgp sessions. This should cause peers to hold on to the routes w...