Chapter 19 Troubleshooting : Common questions
  
Common questions
The general troubleshooting tips include, and can help answer the following questions.
 
How to check hardware connections
Are all the cables and interfaces connected properly?
Is the LED for the interface green?
 
How to check FortiOS network settings
If you are having problems connecting to the management interface, is your protocol enabled on the interface for administrative access?
Is there an IP address on the interface?
 
How to check CPU and memory resources
Is your CPU running at almost 100 percent usage?
Are you running low on memory?
 
How to check modem status
Is the modem connected?
Are there PPP issues?
 
How to run ping and traceroute
Are you experiencing complete packet loss?
 
How to check the logs
Do you need to identify a problem?
 
How to verify the contents of the routing table (in NAT mode)
Are there routes in the routing table for default and static routes?
Do all connected subnets have a route in the routing table?
Does a route wrongly have a higher priority than it should?
 
How to verify the correct route is being used
Has the traffic been routed correctly?
 
 
How to verify the correct firewall policy is being used
Is the correct firewall policy applied to the expected traffic?
 
How to check the bridging information in Transparent mode
Are you having problems in Transparent mode?
 
How to check number of sessions used by UTM proxy
Have you reached the maximum number of sessions for a protocol?
Are new sessions failing to start for a certain protocol?
 
How to examine the firewall session list
Are there active firewall sessions?
 
How to check wireless information
Is the wireless network functioning properly?
 
How to verify FortiGuard connectivity
Is the FortiGate unit communicating properly with FortiGuard?
 
How to perform a sniffer trace (CLI and Packet Capture)
Is traffic entering the FortiGate unit and does it arrive on the expected interface?
Is the ARP resolution correct for the next-hop destination?
Is the traffic exiting the FortiGate unit to the destination as expected?
Is the traffic being sent back to the originator?
 
How to debug the packet flow
Is the traffic entering or leaving the FortiGate unit as expected?