An administrator wants to capture encrypted phase 2 traffic between two FotiGate devices using the built-in sniffer.
If the administrator knows that there Is no NAT device located between both FortiGate devices, which command should the administrator run?

Question

An administrator wants to capture encrypted phase 2 traffic between two FotiGate devices using the built-in sniffer.

If the administrator knows that there Is no NAT device located between both FortiGate devices, which command should the administrator run?

Miquel Triebel · Accepted Answer

diagnose sniffer packet any 'lp proto 50'

Miquel Triebel · Answer

diagnose sniffer packet any 'udp port 500'

Miquel Triebel · Answer

diagnose sniffer packet any 'udp port 4500'

Miquel Triebel · Answer

diagnose sniffer packet any 'ah'

List of questions