FortiGate “Deny: DNS Error”
Fortigate firewalls do inspect the data stream. This is also true for DNS (Domain Name Service). Sometimes you will see the error: "Deny: DNS error" in the logs Having a…
Continue Reading FortiGate “Deny: DNS Error”
Format FortiGate diag sniffer packet for Wireshark
On FortiGate firewalls you got the command: diag sniffer packet [interface] '[filter]' [verbose level] [count] [tsformat] Details you find ⇒here. If you just want to verify, if a packet passes the…
Continue Reading Format FortiGate diag sniffer packet for Wireshark
Dump FortiGate Config into TXT, CSV or HTML
Sometimes you need to document your firewall rules. To do this, I wrote a perl-script to create a CSV file. Importing CSV into a spreadsheet is a good way for…
Continue Reading Dump FortiGate Config into TXT, CSV or HTML
Fortigate Firewall Traffic Processing Troubleshooting
Traffic Processing Application Debugging diag debug application shows what happens during the execution of a process. Detailed information is shown. Debug level is a bit mask. diag debug application [application…
Continue Reading Fortigate Firewall Traffic Processing Troubleshooting
Fortigate Firewall Network Troubleshooting
Network Troubleshooting Interface Status Display interface information. Link status, settings are shown here. get hardware nic <interface> On FortiGates using SPF/SPF+ transceivers you can see their status get system interface…
Continue Reading Fortigate Firewall Network Troubleshooting
Fortigate Firewall Performance Troubleshooting
CPU and Memory Usage get system performance status gives a rough overview over the system status. get system performance status Single processes diag sys top shows the detail of every single…
Continue Reading Fortigate Firewall Performance Troubleshooting