Category Archives: FortiGate

22 September, 2026

Wildcard FQDNs on FortiGate: CDNs, Web Filter, and SSL Exemptions

Configure FortiGate wildcard FQDN address objects for CDN domains. Avoid shared IP over-matching and fix SSL exemption and Web Filter policies.

14 September, 2026

Workspace Mode vs. Configuration Revert Mode in FortiOS

Compare FortiOS workspace mode vs configuration revert mode. Learn when to use CLI transactions and cfg-save revert to prevent lockouts during risky changes.

14 September, 2026

Decoding Every Field in a FortiGate Debug Session Output

Decode every field in the FortiGate diagnose sys session list output. Learn to read proto_state, npu_state, and flags to troubleshoot traffic and offload issues.

14 September, 2026

FortiGate AutoScripts Deep Dive: Inside the Trigger “Fields” Block

Configure FortiGate automation trigger fields for precise log matching. Learn the AND logic, wildcard syntax, and how to find valid field names.

11 September, 2026

Decoding Every Field in a FortiGate Traffic Log: The Complete Reference

Decode every FortiGate traffic log field with this reference. Learn to parse raw logs, identify subtypes, and troubleshoot firewall sessions effectively.

9 September, 2026

Configuring Forward Error Correction on FortiGate

Configure FortiGate FEC on IPsec overlays. Learn to set static ratios and adaptive profiles to protect real-time traffic from packet loss without TCP retransmission...

7 September, 2026

“match-vip enable” inside Firewall Policies

Learn how to use FortiGate match-vip enable to fix VIP precedence issues. Configure match-vip or match-vip-only to control policy matching in Central NAT modes.

7 September, 2026

FortiGate Quick Tip: Restoring the Two Free FortiTokens After a Factory Reset

Restore FortiGate free FortiTokens after a factory reset. Use the FTMTRIAL activation code to re-import your two free mobile tokens via GUI or CLI.

7 September, 2026

FortiGate Wildcard Addresses: The IP Kind, Not the FQDN Kind

Configure FortiGate wildcard address objects for non-contiguous IP matching. Learn the bit math, avoid the Cisco trap, and verify policy hits.

7 September, 2026

FortiGate Route-Tag Address Objects: Firewall Rules That Follow Your BGP Table

Configure FortiGate route-tag address objects to automate firewall policies. Learn how to map BGP routes to dynamic address objects in FortiOS 7.4 without manual...

5 September, 2026

Canceling Federated Upgrade on FortiGate

Cancel FortiGate federated upgrade when the button is grayed out. Use this CLI workaround to bypass forced upgrades and install firmware immediately.

3 September, 2026

FortiGate Port Reference: Every Port for FAZ, FMG, RADIUS, CAPWAP, and the Rest of the Fabric

Use this FortiGate port reference to configure firewall rules for FAZ, FMG, RADIUS, and CAPWAP. Get exact TCP/UDP ports and directions for your change...

3 September, 2026

“diagnose hardware deviceinfo nic”: The Complete Field Reference

Master diagnose hardware deviceinfo nic on FortiGate. Decode NP7 switch counters, host CPU stats, and link settings to isolate packet loss and throughput issues.

3 September, 2026

What Your Optics Are Trying to Tell You: A Deep Dive into `get system interface transceiver`

Master the FortiGate get system interface transceiver command. Decode DDM data, interpret alarm flags, and diagnose SFP failures without swapping hardware.

3 September, 2026

FortiDebug Builder Preview

Use the FortiGate debug CLI builder to generate diagnose commands for sessions, pings, and flows. Copy, save, and troubleshoot FortiGate firewalls faster.

2 September, 2026

FortiOS Automatic Restart of Node.js to Prevent Conserve Mode

Prevent FortiOS conserve mode by enabling automatic Node.js restarts. Configure memory and time thresholds to stop the node process memory leak before it crashes...

2 September, 2026

Tuning the FortiOS IPS Socket Buffer: A Deep Dive into socket-size

Learn FortiOS IPS socket-size tuning to prevent fail-open and conserve mode. Follow this step-by-step workflow to baseline, adjust, and verify your FortiGate IPS buffer...

2 September, 2026

Troubleshooting IPSec VPN tunnels in FortiGate Firewalls 2026 Version

Master FortiGate IPsec VPN troubleshooting with exact CLI commands. Filter IKE debug output, list active tunnels, and force renegotiation in FortiOS 7.4+.