FortiGate
Tools, diagnostic guides, commands and trusted resources for administering and troubleshooting FortiGate firewalls and FortiOS.
Check FortiGate IPsec tunnels
Inspect IPsec tunnel status, negotiated selectors and traffic counters.
Command / scriptShow FortiGate system status
Shows the model, FortiOS version, serial number, HA mode and uptime
Command / scriptCapture packets with the FortiGate sniffer
Capture traffic on FortiGate using filters for interfaces, hosts, ports and protocols.
ResourceFortiGate Center
FortiGate Diagnostic Center: VPN, IPsec, SD-WAN, routing, firewall, NAT, DNS, HA, interfaces and FortiOS commands
Command / scriptShow FortiGate routing table
List active FortiGate routes and their origins when diagnosing routing issues.
Command / scriptAnalyze the path of a stream on FortiGate
Use debug flow to investigate the path of network traffic on a FortiGate.
ResourceFree IT tools
Use free browser-based IT tools for networking, DNS, Windows, email, security, diagnostics, PDF workflows and day-to-day administration.
ResourceRule Generator
Describe a network feed and generate a rule base for FortiGate, Windows Firewall or Linux nftables
Knowledge hubHome
Free tools, procedures, diagnostics, scripts, dictionary and practical resources for IT technicians, system administrators and SMEs
IT dictionaryFortiGate Firewall Policy
A Rule FortiGate which allows or blocks traffic between interfaces, zones or networks
IT dictionarySSL VPN FortiGate
Access VPN The TLS-based LST is used to connect users to the company's network.
IT dictionaryFortiGate
One firewall Fortinet used to filter, route, establish VPN and secure network access.
IT dictionaryFortiOS
The operating system that equips the FortiGate.
IT dictionarySession Helper FortiGate
A mechanism FortiOS which helps some complex protocols to cross the firewall.
IT dictionaryIPsec Phase 1
The first step in an IP-sec tunnel where peers negotiate the secure channel.
ResourceHow to check the state of an IPsec FortiGate tunnel
Quickly check the state of the IPsec tunnels since the FortiGate LTC
ResourceHow to diagnose IPsec Phase 1 error on FortiGate
A Phase 1 error means that IPsec peers fail to properly establish l,IKE before even negotiating the Phase 2 selectors
ResourceHow to diagnose a Phase 2 IPsec FortiGate
When Phase 1 is up but traffic does not pass, the selectors and Phase 2 parameters are the first items to compare
ResourceHow to ping from a FortiGate
Test the reachability of a destination directly from the FortiGate
ResourceHow to diagnose an SD-WAN rule
This BOAI guide provides a structured method for diagnosing a sd-wan rule without multiplying unnecessary changes
ResourceHow to test a VLAN
A structured approach avoids looking for the way in when the VLAN does not already reach it
TroubleshootingFortiGate IPsec Phase 2 does not go up
Phase 1 is established but no usable Phase 2 SA is created
ResourceFirewall vs Antivirus: What difference?
TheGartman controls network communications. L,antivirus analyzes files and processes on equipment. They protect different surfaces
ResourceNO_PROPOSAL_CHOSEN — No IP-proposals in the IP sector
The cryptographic parameters of the two IP-ends in the year 1995 do not match
TroubleshootingSD-WAN toggle on the wrong link
Traffic uses a backup link while the main link appears available
TroubleshootingVPN connected but no access to the internal network
The VPN tunnel is established correctly but internal resources remain inaccessible. The problem is usually after authentication
TroubleshootingRADIUS timeout authentication
The NAS orGrand does not receive a RADIUS response in time
ProcedureDiagnose an IPsec tunnel on FortiGate
Inspect IPsec tunnel status, negotiated selectors and traffic counters.
ProcedureModify a FortiGate IPsec tunnel with a rollback plan
Controlled change method of a site-to-site tunnel
ProcedureCreate a VLAN on a FortiGate
Create a VLAN interface, its DHCP and the necessary policies without disrupting existing networks
ProcedureDiagnose an inaccessible TCP port
Check the network path, l, service listening and firewalls when an application does not join a server
ProcedureRespond to fraudulent connection attempts on a VPN
Block sources, check for success and strengthen the, access to the RSS file without limiting yourself to IP addresses
ProcedureSite-to-site VPN incident: collect diagnostics and restore service
Structured procedure to diagnose an IP tunnel in the yearsec site-to-site unavailable without multiplying the changes
ResourceFortiGate — diagnostic memo
FortiGate CLI references for system status, interfaces, routing, sessions, NAT, SD-WAN and IPsec diagnostics.
ResourceWindows network — diagnostic memo
Windows commands for IP configuration, DHCP, DNS, routes, TCP ports and network troubleshooting.
ResourceLinux — Essential commands
Linux commands for services, logs, processes, storage, networking, DNS, permissions and system diagnostics.
ResourceNetwork ports — memo form
Common TCP and UDP ports, their services and practical checks for network administration.
Knowledge hubIT Networking
Tools and methods for DNS, DHCP, VLAN, routing, Wi-Fi, LINK, TITLE/IP, latency, MTU and network diagnostics
Knowledge hubCybersecurity
Defensive resources for phishing, ransomware, compromised accounts, MFA, hardening,19th, incidents and protection of backups
Knowledge hub3CX & VoIP
3CX and VoIP troubleshooting:SIP trunks, DECT, SBC, NAT, RTP, audio quality, certificates, phones and backups.