Just like for FortiGate releases we created and publish here a collection of CLI commands for troubleshooting the FortiAnalyzer appliances. FortiAnalyzer Version 6.4
CheatSheet – FortiAnalyzer v6.4
Disable the SIP ALG/Session Helper on the Fortigate
Last update: 30.10.2025 General Your VoIP provider should give you the information, if the SIP ALG on the Fortigate is needed or not. In the default setting of a Fortigate the SIP ALG is active.
FortiGuard DNS Rating Server (SDNS) unavailable
Last update from 12.05.2021 at 09:40 Swiss local time: We have noticed an improvement in the situation. Some rare rating timeouts still show up from time to time, but the majority of requests are being answered correctly. Also the DNS servers are working as usual again. We have noticed an…
SEPPmail: Integration mit einem E-Mail Gateway
In der Vergangenheit wurde die SEPPmail häufig zwischen dem Secure E-Mail Gateway (AntiSpam) und dem Mailserver implementiert. Dieser Ansatz hat den Nachteil, dass die Inhalte (Attachements, URLs) von verschlüsselten Nachrichten nicht geprüft werden. In diesem Beitrag betrachten wir deshalb die Integration als Loop.
DIY: FortiGate HQIP self-loopback cable or plug
On some FortiGate models, you are being asked to connect a self-loopback cable on some ports during the HQIP test. This request looks like the following CLI output:
Fortigate und Swisscom TV – zum dritten
Unser letzter Beitrag zur Konfiguration einer Fortigate, um zuhause auch Swisscom TV durch die Fortigate zu bekommen, ist schon eine zeitlang her. Deswegen hier mal wieder ein aktueller Beitrag mit einer Fortigate auf FOS 7.0.0 (der auch mit 6.4.5 getestet wurde). Aber Vorsicht, mit dem Swisscom Centro Business oder Centro…
Exchange Pwn2Own Vulnerability April 2021 (Yes, a new one – it’s not Hafnium anymore!)
Let’s mention the important things first: Please patch you vulnerable Exchange 2013, 2016 and 2019 immediately! The page msxfaq has published an infosite to this vulnerability including the instructions how to fix your Exchange. Some security researchers have demonstrated three high risk vulnerabilities for exchange server systems. Microsoft has published…
FortiGate hardware acceleration step-by-step troubleshooting
Last updated: 27.06.2025 One of the very powerful features of FortiGate hardware appliances is the hardware acceleration chipset included in the hardware platform. This allows to forward traffic in specific situations directly from the incoming interface to the outgoing interface without passing the CPU of the system. This can safe…
Exchange Hafnium Vulnerability March 2021
Let’s mention the important things first: Please patch you vulnerable Exchange 2013, 2016 and 2019 immediately! The page msxfaq has published an infosite to this vulnerability including the instructions how to fix your Exchange. Even though we, as Boll Engineering AG, are not associated in any way with the affected…
SEPPmail: Fehler beim CRL Check
Nachfolgende Problematik ist in SEPPmail 12.1 behoben Bei einigen SEPPmail-Installationen wird unter X.509 Certificates in der Spalte OCSP/CRL folgender Fehler angezeigt: error: unable to get local issuer certificate