IT Toolbox

FortiGate

Fortinet / Network Security

FortiGate

Tools, diagnostics, commands and resources for administering and troubleshooting FortiGate firewalls and FortiOS.

FortiOSIPsec VPNSSL VPNSD-WANHANATCLI

8BAOI modules

23selected resources

6definitions

Tools & diagnostics

Direct access to the most relevant BAOI modules for this technology.

Resource Check FortiGate IPsec tunnels

Shows detailed status of IPsec tunnels, selectors and traffic meters.

Open → Troubleshooting FortiGate Center

See also:. ping from a FortiGate. See also:. FortiGate Central NAT.

Open → Resource Show FortiGate system status

Shows the model, FortiOS version, serial number, HA mode and operating time.

Open → Resource Analyze the path of a stream on FortiGate

temporarily activates the debug flow to identify the rule, route or reason for a traffic block.

Open → Resource Capture packets with the FortiGate sniffer

Observes a precise traffic through the firewall from a host and port filter.

Open → Resource Show FortiGate routing table

Lists active routes and their origin to diagnose a routing problem.

Open → Tool IT Generators

Robocopy, PowerShell, commandes IT et règles firewall.

Open → Tool Computer Command Generator

Robocopy, network, DNS, Active Directory, tâches et FortiGate.

Dictionary

Essential concepts related to FortiGate.

Dictionary FortiGate Firewall Policy

A Rule FortiGate which allows or blocks traffic between interfaces, zones or networks.

View → Dictionary SSL VPN FortiGate

Access VPN The TLS-based LST is used to connect users to the company's network.

View → Dictionary Session Helper FortiGate

A mechanism FortiOS which helps some complex protocols to cross the firewall.

View → Dictionary FortiGate

Tools, diagnostics, commands and resources to administer and troubleshoot theFortiGate and FortiOS.

View → Dictionary Administrative Distance FortiGate

A value that helps the FortiGate to choose between several sources of roads.

View → Dictionary Transparent Mode FortiGate

A mode where the FortiGate works mainly as a level 2 bridge.

Practical guides

Step-by-step tutorials and procedures.

Guide How to check the state of an IPsec FortiGate tunnel

Quickly check the state of the IPsec tunnels since the FortiGate LTC….

View → Guide How to diagnose IPsec Phase 1 error on FortiGate

A Phase 1 error means that IPsec peers fail to properly establish the IKE before even negotiating the Phase 2 selectors.

View → Guide How to diagnose a Phase 2 IPsec FortiGate

When Phase 1 is up but traffic does not pass, the selectors and Phase 2 parameters are the first items to compare.

View → Guide How to check if Windows firewall is enabled

Control the Windows firewall status on Domain, Private and Public profiles.

View → Guide How to ping from a FortiGate

Test the reachability of a destination directly from the FortiGate….

View → Guide How to diagnose an SD-WAN rule

This BAOI guide provides a structured method for diagnosing a sd-wan rule without multiplying unnecessary changes.

Troubleshooting

Related failures, errors and diagnostics.

Troubleshooting FortiGate IPsec Phase 2 does not go up

Phase 1 is established but no usable Phase 2 SA is created.

View → Troubleshooting SD-WAN toggle on the wrong link

Traffic uses a backup link while the main link appears available.

View → Resource Firewall vs Antivirus: What difference?

TheGartman controls network communications. L,antivirus analyzes files and processes on equipment. They protect different surfaces.

View → Error code IKE timeout — Ex IKE negotiation

The Channel is not responding correctly to IPsec negotiation.

Field procedures

Reusable intervention methods.

Procedure Diagnose an IPsec tunnel on FortiGate

Diagnose a FortiGate IPsec tunnel methodically across IKE Phase 1, Phase 2, selectors, routing, firewall policies, counters, packet capture, and targeted I…

View → Procedure Create a VLAN on a FortiGate

Create a FortiGate VLAN end to end with an 802.1Q subinterface, IP addressing, optional DHCP, address objects, firewall policies, switch trunking, and vali…

View → Procedure Modify a FortiGate IPsec tunnel with a rollback plan

Edit IPsec FortiGate tunnel in production with initial state, comparison of two peers, change window, success criteria and timed rollback.

View → Procedure Diagnose an inaccessible TCP port

Diagnose an inaccessible TCP port end to end by checking DNS, routing, the server listener, host firewall, network ACLs, NAT, and packet captures of the TC…

Cheat sheets

Quick references for operations.

Cheat sheet FortiGate — diagnostic memo

FortiGate CLI reference for system state, interfaces, ARP, routing, sessions, policy/NAT, SD-WAN, IPsec and debug flow.

View → Cheat sheet Linux — Essential commands

Linux field reference for system, processes, systemd, logs, storage, networking, DNS, firewall, accounts and SSH.

View → Cheat sheet Windows network — diagnostic memo

Field workflow to isolate Windows network failures across link, DHCP, IP, DNS, routing, firewall and application layers.

Related technologies

Continue exploring with complementary topics.

Technology IT Networking

Tools and methods for DNS, DHCP, VLANs, routing, Wi-Fi, switching, TCP/IP, latency, MTU and network diagnostics.

View → Technology Cybersecurity

Defensive resources for phishing, ransomware, compromised accounts, MFA, hardening, firewalls, incidents and backup protection.

View → Technology 3CX & VoIP

3CX and VoIP troubleshooting for SIP trunks, DECT, SBC, NAT, RTP, audio quality, certificates, phones and backups.

♡ 0