Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hello,I successfully configured a new VPN site-to-site between our Cisco FTD and a remote site that uses FortiGate.The issue is that we are not enabled to send traffic through this tunnel; all the ACPs and NAT Exemptions from our side are correctly c...
HelloI found this error when trying to upgrade my Catalyst 2960-X Series 48Pthis is the error I am getting :Err: Interrupt: Data TLB miss (0x1100).PC: 0x1f195c14, MSR: 0x00021000, ESR: 0x00800000, DEAR: 0x38600004:. Data TLB miss on write at 0x386000...
Hello sir,As a conclusion of this matter, it seems that it was an issue on the FortiGate side, for the IPSEC-SPOOF error it looks to be a normal behavior when trying to initiate traffic from the OUTSIDE to our LAN as I tested it in a site-to-site VPN...
Hello Aref,We have tried this configuration with another site that also uses Fortigate as an edge FW, but the IPSEC-SPOOF reason remains when using packet tracer to simulate remote traffic.
This is the output of crypto ipsec sa after changing the nat rule:#pkts encaps: 1392, #pkts encrypt: 1392, #pkts digest: 1392#pkts decaps: 1254, #pkts decrypt: 1254, #pkts verify: 1254#pkts compressed: 0, #pkts decompressed: 0#pkts not compressed: 13...
Hello, thank you for the reply. When trying to initiate a ping from our side it doesn't work but we see traffic coming from our FTD (#pkts encaps increase), on the other hand, the Fortigate admin confirms he didn't see any traffic originating from an...