Cheat sheet FortiGate For Troubleshooting

 L3 Diagnose Commands 
-------------------------------------
 · Diagnose Ip Arp List
 · Debug Flow
 · Diagnose Debug Flow Show Console Enable
 · Diagnose Debug Enable
 · Diag Debug Flow Trace Start 
 · Diagnose Debug Flow Trace Stop
 · Diagnose Debug 
 
--------------------------------------------
CPU Usage Diagnose Commands
--------------------------------------------
 · Get System Performance Status
 · Diagnose Sys Top 1
 · Diagnose Sys Top
 · Diagnose Sys Top-Summary
 · Diagnose Hardware Test Suite All
 
--------------------------------------
Crash Logs Diagnose Commands
--------------------------------------
 · Diagnose Debug  Crashlog Read
----------------------------------------------------
Fortigate Hardware Diagnose Commands 
----------------------------------------------------
 · Get Hardware Status
 · Get Hardware Npu Mp6 Port-List
Network Process Work In Interface Level  L1 Issues
-------------------------------------------------
 · Diagnose Sys Session List
 · Diag Netlink Aggregate Name Agg1
 · Diagnose Npu Spm List
Firewall Disk Space Or To Format The Firewall Disk 
--------------------------------------------------------- 
 · Get Hardware Status
 · Execute Disk List
 · Execute Disk Format
CPU Use And Memory 
--------------------------------------------------------
CPU#    Diagnose Hardware Sysinfo Cpu
Mem#    Diagnose Hardware Sysinfo Memory

Log
------
Diagnose Log Test  ( Test If The Logs Are Generating) 
Execute Backup Disk Alllogs {FTP}Tftp |USB)
Note:- User-Anonymize We Can Set The Log For Users 
---------------------------------------------------

Basic Commands
-----------------------------------------------
Administrative User Only 
----------------------------------
Get System Status
Show Full Configuration System Interface <Port>
Show System Interface <Port>
How Do You Restrict Logins To FortiGate To Be Only From Specific IP Addresses?
 A. Disable HTTPS Access On Interface
 B. Configure Trusted Host
User Administrator
---------------------------------------------
System > Admin Profiles  (Ro View The Admin Profile)
Network > Interfaces  >Address >Administrator Access 
Transparent Mode MAC Table 
--------------------------------------------
Diagnose Netlink Brct1 Name Host < VDOM1>.B
Debug Commands Routing Table Display 
--------------------------------------------------------
 • Get Router Info Routing-Table All 
 • Get Router Info Routing-Table Database  : To See The Inactive Routes From Routing Table
 • Diagnose Firewall Proute List   : - To View Policy Routing Table 

RPF Checks
--------------------------------------- 
 • Strict-Src-Check Disable (Loose RPF )(Default)
 • Strict-Src-Check Enble  (Strict RPF)
 • Set Strict-Src-Check Disable 
Packet Capture In Fortigate 
 • Diagnose Sniffer Packet <Interface> <Filter><Timestamp><Frame Size>
 • Ctrl +C To Stop The Packet Capture 
 • Diagnose Sniffer Packet Any 'Host 192.168.1.254 And Icmp" 3
 • Diagnose Sniffer Packet Any 'Port 443' 4   (It Will Show In/Out Packet