Search Results

(2018-08-22) Problem It is a good idea to run a disk check before doing a firmware upgrade, especially on little units that get all upset because their power got ganked during the last thunderstorm. It's also tedious to do this through the web interface when w...

Problem Upgrading firmwares via the web UI is tedious, especially when you have 50 or 60+ of these fuckers to do. Solution You have to do this via tftp. This involves setting up a tftp server and making sure the appropriate firmware is A) loaded on it and B) a...

(2018-02-26) Problem I have more vDOMs to connect to a VLAN than I have physical interfaces. (The easy way to glue vDOMs together on the same VLAN is to tag up different physical ports with the same VLAN, associated with different vDOMs. This doesn't scale.) S...

(2018-06-11) Problem CPU on Fortigate is maxed out for a long period of time (hours, days). Solution Identify the process using the CPU: get system performance top It should be obvious which process is using all the CPU. Note the PID of the offending process....

(2018-01-30) Debugging Flow Example: diag debug enable diag debug flow filter addr 203.160.224.97 diag debug flow show function-name enable diag debug flow trace start 100 Useful other things: di de flow filter saddr 10.0.0.1 di de flow filter daddr 199.99.99...

(2018-01-30) Session operations di sys session list Set a filter: di sys session filter di sys session filter src 1.2.3.4 di sys session filter dst 5.6.7.8 In general: clear clear session filter dport dest port dst dest ip address duratio...

(2017-11-23) Problem Want to sniff traffic flow. Solution # diag sniffer packet <interface> <'filter'> <verbose> <count> a Filter syntax: '[[src|dst] host<IP1>] [[src|dst] host<IP2>] [[arp|ip|gre|esp|udp|tcp] [port_no]] [[arp|ip|gre|esp|udp|tcp] [port_no]]' ...

(2018-03-01) Problem The reset to factory settings using the GUI is not available in v5.4. Solution In a command prompt, global context, issue the command: exec factoryreset After confirmation, firewall will reboot with default configuration for the loaded fi...

(2018-02-02) Problem My FortiClient users are getting prompted to "register" their FortiClients against the FortiGate firewall. I don't want this to happen. Solution On the relevant LAN interface, ensure that FortiTelemetry is not enabled. In 5.4.6 this is a c...