Search Results

(2019-05-28) Problem Routing table? Solution get router info routing-table all get router info bgp summary

(2018-12-19) Problem Want SSH Pubkey authentication for my AD-backed administrative user. Specifically because having to have my AD password in plaintext in my home directory in order for rancid to work is stupid, security-wise. Solution conf global conf sys a...

(2019-03-13) Problem Standard configuration for (more) secure crypto Solution config sys global set admin-https-ssl-versions tlsv1-2 set fds-statistics disable set strong-crypto enable end For each vDom with SSLVPN active in it: config vpn ssl setting ...

(2019-03-13) Problem SSLVPN users have to use FQDNs instead of short names when connecting to office resources. Solution For whatever reason, you have to do this through the CLI; you can't do it through the web interface. config vpn ssl settings set dns-suff...

(2019-01-10) What firmware am I running? # get system status Version: FortiGate-60D v5.6.2,build1486,170816 (GA) [...]

(2019-07-08) Problem Traffic shaping wtf? Solution In 5.6, traffic shaping was removed from IPv4 Policy and moved to its own policy page. In 5.6.3, Fortinet added the ability to apply schedules to Traffic Shaping Policies. However this functionality does not a...

(2018-08-02) Problem Site to site VPN not coming up. Solution it depends what you would like to troubleshoot. If you like to troubleshoot the Phase1/2 of a VPN your command is the way to go which means: diag debug reset diag debug disable diag debug applicatio...

(2019-04-10) Problem Wifi WPA/WPA2 access tests that depend on a LDAP (Active Directory) user group fail. Solution You can't use a LDAP group for Wifi authentication because of the way that the user credentials are encoded before being passed through -- for so...

(2022-02-08) Problem What do we have to do to permit the LDAP lookup account to be able to change passwords on the AD server? Solution that feature has two pre-requisities: works with Microsoft AD server ONLY ! so second statement page 720 (as mentioned, I h...

(2020-09-14) CLI Restore Configuration > execute restore config tftp <filename> <ip> > execute restore config ftp <filename> <ip> <username> <password>

(2021-07-20) Problem Display logs from a console session. Solution Select log source: # execute log filter device Optional: select log category: # execute log filter category Display: # execute log display Some examples from the source: # execute log filter...

(2021-06-16) Limited iPerf3 on Fortigates # diag traffictest client-intf port1 <----- Define FortiGate port. # diag traffictest server-intf port1 <----- Define FortiGate port. # diag traffictest port 5209 <----- Define iPerf3 port ...

(2022-01-17) Problem IPSA self test failed, disable IPSA! Solution FW # conf ips global FW (global) # set cp-accel-mode none FW (global) # end Discussion Hardware Acceleration for flow-based security profiles (NTurbo and IPSA) Some FortiGate models support a...

(2021-10-07) Problem Who's logged in from where? Solution # di firewall auth list

(2022-02-15) Problem I want a (or a bunch of) read-only admin(s) with global scope. Solution # config global # config system accprofile edit "admin_readonly" set admingrp read set authgrp read set endpoint-control-grp read s...

(2022-06-17) Problem SD-WAN no workie. Solution You can probably figure out information from some or all of these: # diag sys virtual-wan-link member # diag firewall proute list # diag sys virtual-wan-link health-check # diag sys virtual-wan-link service # dia...

(2020-01-11) Problem If you try to put an IP address on a VPN tunnel interface, the minimum netmask you can apply to that interface is /27. Solution hashtag-shruggie Commentary That's a lot of IP addresses to waste on a point-to-point link, especially one wher...

(2020-03-24) Problem What does this error code that FortiClient SSLVPN is giving me? Solution If FortiClient fails as the following stages, the likely cause is as follows: 10% – Local Network/PC issue 40% – Application or the Fortigate causing the error, occa...