Search Results

(2019-03-13) Problem SSLVPN users have to use FQDNs instead of short names when connecting to office resources. Solution For whatever reason, you have to do this through the CLI; you can't do it through the web interface. config vpn ssl settings set dns-suff...

(2019-01-10) What firmware am I running? # get system status Version: FortiGate-60D v5.6.2,build1486,170816 (GA) [...]

(2019-07-08) Problem Traffic shaping wtf? Solution In 5.6, traffic shaping was removed from IPv4 Policy and moved to its own policy page. In 5.6.3, Fortinet added the ability to apply schedules to Traffic Shaping Policies. However this functionality does not a...

(2018-08-02) Problem Site to site VPN not coming up. Solution it depends what you would like to troubleshoot. If you like to troubleshoot the Phase1/2 of a VPN your command is the way to go which means: diag debug reset diag debug disable diag debug applicatio...

(2019-04-10) Problem Wifi WPA/WPA2 access tests that depend on a LDAP (Active Directory) user group fail. Solution You can't use a LDAP group for Wifi authentication because of the way that the user credentials are encoded before being passed through -- for so...

(2022-02-08) Problem What do we have to do to permit the LDAP lookup account to be able to change passwords on the AD server? Solution that feature has two pre-requisities: works with Microsoft AD server ONLY ! so second statement page 720 (as mentioned, I h...

(2020-09-14) CLI Restore Configuration > execute restore config tftp <filename> <ip> > execute restore config ftp <filename> <ip> <username> <password>

(2021-07-20) Problem Display logs from a console session. Solution Select log source: # execute log filter device Optional: select log category: # execute log filter category Display: # execute log display Some examples from the source: # execute log filter...

(2021-06-16) Limited iPerf3 on Fortigates # diag traffictest client-intf port1 <----- Define FortiGate port. # diag traffictest server-intf port1 <----- Define FortiGate port. # diag traffictest port 5209 <----- Define iPerf3 port ...

(2022-01-17) Problem IPSA self test failed, disable IPSA! Solution FW # conf ips global FW (global) # set cp-accel-mode none FW (global) # end Discussion Hardware Acceleration for flow-based security profiles (NTurbo and IPSA) Some FortiGate models support a...