Search This Blog

#SDN #Routing #Switching #Firewall #NAC #Proxy #Mail Gateway #SDWAN

This blog contains all the challenges faced by me while using different security and network products. This also contains few best pratcies to set up your network infra.

Debugging Forigate VPN

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

- February 24, 2014

Use the following steps

diag debug appl ike -1

diag debug console timestamp enable

diag vpn ike filter clear

diag vpn ike log-filter dst-addr4 x.x.x.x

diag debug enable

Get link
Facebook
Twitter
Pinterest
Email
Other Apps

Comments

Send test SNMP traps from Fortigate

- March 24, 2014

#: diag test application snmpd 44 SNMP Daemon Test Usage 1: display daemon pid 2: display snmp statistics 3: clear snmp statistics 4: generate test trap (oid: 999) 5: generate deploy traps 99: restart daemon

Traffic Shaping With Fortigate

- March 03, 2014

FortiGate v4.0 Description This article describes the Traffic Shaping features that have been implemented in FortiOS 4.0 In FortiOS version 4.0, the traffic shaping has been enhanced. Diagnose commands allowing to verify each traffic shaper's usage and giving more configuration flexibility. See also the related articles at the end of this page for additional information. Solution Summary 1- Traffic shaping configuration is dissociated from the Firewall policies allowing multiple policies to use common configurations 2- Possibility to use independent configurations in policies for forward and reverse traffic directions 3- The P2P shaping capabilities are now defined at the application control level 4- Troubleshooting packet loss with statistics on traffic shaping configurations 5- Troubleshooting packet loss with the debug flow diagnose commands 6- Session list details with dual traffic shaper (forward and reverse traffic) 1- Traffic shaping configuration is di

Upgrading the firmware on a standalone Fortigate unit or units in an HA cluster

- February 06, 2014

Understanding upgrade paths: Each firmware version has an upgrade path requirement from older versions. Most of the time when you are in a MR (major release) patch level, you can upgrade straight to any patch level within the MR. ex: 1) currently, a fortigate unit is running 4.0 MR3 patch 3. 2) You wish to upgrade it to 4.0 MR3 patch 11. 3) You can simply upgrade it directly to 4.0 MR3 patch 11. Most of the time when you are upgrading from a MR to the next MR, you can upgrade straight to any patch level in the next MR as long as you are at the highest patch level in the lower/previous MR. ex: 1) currently, a fortigate unit is running 4.0 MR2 patch 3. 2) You wish to upgrade it to 4.0 MR3 patch 11. 3) You must first upgrade it to 4.0 MR2 patch 13 (highest 4.0 MR2 patch). 4) Then you can upgrade to 4.0 MR3 patch 11. You should ALWAYS refer to the release notes of the firmware release you wish to upgrade your unit. Even, for comfort, just open a ticket