Category Archives: FortiGate

22 May, 2024

FortiOS Link-Monitor Gotcha

Stop FortiOS link-monitor from removing all static routes. Learn to use the set route command to track specific destinations without breaking other paths.

7 May, 2024

Multiple GUI Packet Captures at the same time

Learn how to run multiple packet captures simultaneously in the FortiOS GUI. Configure interface filters and view ingress versus egress traffic for precise troubleshooting.

7 May, 2024

Converting FortiGate CLI packet debug to PCAP file on macOS

Convert FortiGate packet debug to PCAP on macOS using fgt2eth.pl and tshark. Install Homebrew, run the script, and analyze traffic in Wireshark.

6 April, 2023

FortiGate Troubleshooting Sessions

Use the FortiGate dia sys session command to filter and analyze active connections. Learn to interpret NAT, protocol states, and timeouts for effective troubleshooting.

4 April, 2023

FortiGate IPS IP Exemption

Configure FortiGate IPS IP Exemption to stop false positives. Learn how to set signature exemptions for specific source and destination IPs in your IPS...

3 April, 2023

Direct Access through Split Tunnel VPN

Configure FortiGate split tunnel negate to route specific FQDNs via the local default gateway. Use dstaddr-negate and split-tunneling-routing-negate commands.

26 March, 2023

Security Profile Groups

Enable FortiGate Security Profile Groups via CLI to standardize policy settings. Learn how to activate the feature and apply groups in the FortiOS GUI.

23 March, 2023

Fortinet SD WAN Packet Duplication

Configure Fortinet SD WAN packet duplication for voice traffic. Learn how to enable the feature in FortiOS 6.4.3 and verify it with diag sniffer.

10 February, 2022

Geo-Blocking with Local In Policy

Configure FortiGate local-in policy geo-blocking to stop attacks on the firewall itself. Block specific countries on all ports with this exact setup.

4 February, 2022

FortiWiFi as WiFi Client

Learn how to configure FortiWiFi as a WiFi client via CLI and GUI. Use the local radio as a WAN egress point for wired...

10 October, 2021

Quick Tip – Controlling Source Interface Traffic

Learn how to control FortiGate source interface selection for external resources and FortiGuard connections in FortiOS 7.x using the new GUI options.

30 September, 2021

Quick-Tip – Checking your Fortigate DB versions

Check FortiGate DB versions using the dia autoupdate versions command. Verify FortiGuard updates and certificate status directly from the CLI.

2 August, 2021

DNS Doctoring on FortiGate

Fix FortiGate DNS doctoring issues when internal clients use external DNS. Configure VIPs with any interface and create inside-to-inside policies for seamless connectivity.

16 March, 2021

Quick-Tip – Geography-Based Internet Services Databases

Learn how to create a custom FortiGate Internet Services Database entry filtered by country, region, or city. Step-by-step guide to restrict ISDB to specific...

8 March, 2021

Troubleshooting SIP on FortiGate Firewalls

Disable SIP ALG on FortiGate to fix FortiVoice trunk issues. Use CLI commands to switch from proxy-based to kernel-helper-based and clear sessions.

22 February, 2021

FortiGate AD Polling with Windows Server 2003

Resolve FortiGate AD polling failures on Windows Server 2003. Learn how to diagnose SMBv1 compatibility issues using FortiGate debug commands and packet captures.

10 February, 2021

Using WAN Link Monitor for Redundant Internet Connections

Configure FortiGate WAN Link Monitor for reliable internet failover. Learn to set up static routes and CLI link monitors for redundant ISP connections.

6 February, 2021

Setting Up Notification of FortiGate Firewalls with Automation

Configure FortiGate automation stitch to send email alerts for OSPF changes and high DHCP lease usage. Step by step setup guide.