====== Fortigate Troubleshooting ======

There are most common issues which can happen (users report):

  * can't reach internet
  * server is unresponsible

Most important is to realize what can it cause and what resource userst are trying to reach.

===== can't reach internet =====

possible issues:

  * internet line is down (or any switch / router on the line)
  * DNS servers are unresponsible

==== internet line is down ====

at client computer where is internet inaccessible I need to make sure about next questions:

  * is computer in my network? (mostly: network address, gateway, DNS servers) : [[:in|India]] <code>ipconfig /all</code>
    * FALSE: Is main router accessible? Is DHCP running? Have DHCP free IP addresses?
  * is my gateway responsible? <code>ping <gtw-ip-address></code>
    * FALSE: Is router stucked? Is some Switch on the way broken?
  * is my internet line responsible? <code>ping <my-public-ip></code>
    * FALSE: Isn't change in some firewall rule?
  * is some IP address in internet responsible? <code>ping 1.1.1.1</code>
  * is my DNS responsible? <code>ping <my-dns-ip-address></code>

When is false only last question, you need to troubleshoot DNS servers. That is external service and is substituble.

==== DNS servers are unresponsible ====

For work our systems there is need our internal DNS - usually on IP address finish with 5 - 10.0.???.5

Check your DNS server: <code>ping <my-dns-ip-address></code>

When is unresponsible, you can use (for work internet addresses at least) public DNS servers like:
  * 1.1.1.1
  * 8.8.8.8
  * 8.8.4.4
or some from your internet provider

===== server is unresponsible =====

There is important realize location of this server - local vs remote (USA)

possible issues - local server:

  * something is stucked on the server
  * HW issue

It isn't fortigate issue

possible issues - remote server:

  * my internet line up
  * remote internet line up
  * VPN is connected
  * Static Routes status