Just a quick note on how to lookup and search in the FortiGate Internet Service Database(ISDB) for later reference. Search for a service: FortiGate80D # get system status | grep Version Version: FortiGate-80D v6.2.2,build1010,191008 (GA) FortiGate80D # diagnose internet-service id | grep -i microsoft ID: 327681 name: “Microsoft-Web” ID: 327682 name: “Microsoft-ICMP” ID: 327683 name: […]
Didn’t find alot of information on how to view the FortiNet approved CA-store, so I thought I’d make a post about it.This is the command to check the store (details can be omitted). Note there is a difference between an unit running VDOM – With VDOM: get certificate ca details – Without VDOM: get vpn […]
Most are probably familiar with the command diag sys top, to find processes that consume too high CPU/memory. To find a specific PID of a processes, a command was introduced in v6 (I think), that allows you to search for PIDs for a given process.Under follows an example of finding the PIDs for httpsd and […]
I encountered a problem with a firewall blocking traffic even though it was supposed to let traffic through. This particular policy used nested object grouping (Main group > Sub-group > NetworkAdr-member). The odd thing was, it seemed to only affect one vDom. What was happening: The traffic did not match the configured policy and was […]
Just thought I’d drop a post on a compatability issue which caused a lot of hassle for us. Problem: Problems establishing site to site VPN between FortiGate 1500D and Check Point 1430 appliance with Gaia embedded. Error: Main Mode Sent Notification to Peer: payload malformed – possibly a mismatch in pre-shared keys Background: We were […]
Just a quick note about the auto-script functionality and how to run multiple commands, because this had me stomped on a Monday morning. (Thank you FortiNet for your sparse documentation) There is no fancy solution, no special new line characters, no encapsulating the commands in quatation marks and separating them by a delimiter or anything […]