Enterprise Field Guidance · 13 Active Runbooks
Interactive Web Field Runbooks
Step-by-step closed-loop diagnostic workflows fusing official Fortinet Admin Guides with 10+ real-world TAC Knowledge Base articles. Each runbook includes pre-flight baselines, surgical execution CLI, live impact telemetry diffs and 1-click rollbacks.
VPN & BGP
RUNBOOK 01 / 17
Hub-and-Spoke ADVPN with BGP Shortcuts
Dynamic spoke-to-spoke IPsec shortcuts, auto-discovery receiver, TCP MSS clamping and next-hop self override.
Secure SD-WAN
RUNBOOK 02 / 17
SD-WAN Performance SLA & Dynamic Multi-Path Steering
Multi-path steering thresholds, jitter/packet loss damping and probe integer wrap bug fixes.
High Availability
RUNBOOK 03 / 17
HA Active-Passive Sub-Table Checksum Diffs
18 configuration sub-table checksum mismatches, recalculations and remote gateway split-brain tripwires.
Kernel & Memory
RUNBOOK 04 / 17
WAD & IPS Process Memory Recovery
Zero-downtime worker recycling, memory bloat isolation and worker-count tuning.
Kernel & Memory
RUNBOOK 05 / 17
Understanding Conserve Mode Thresholds
Red, Extreme and Green transition states, session drop mechanics and memory protection tuning.
Kernel & Memory
RUNBOOK 06 / 17
Reduce Memory Use & Avoid Conserve Mode
Session TTL tuning, TCP buffer optimization and proxy-mode memory shedding on 2GB RAM models.
System & Updates
RUNBOOK 07 / 17
FortiGuard Update Memory Spikes
Antivirus & IPS signature database unpack buffers, AV engine memory clamping and update stagger.
Diagnostics & TAC
RUNBOOK 08 / 17
Collect High Memory TAC Logs
Comprehensive debug report bundles, slabinfo leak inspection and crashdump extraction for Fortinet TAC.
Hardware Optics
RUNBOOK 09 / 17
Onsite SFP Link Flapping & Low RX Power
Optical DDM transceiver diagnostics, dBm power thresholds and dirty fiber cleaning protocols.
Hardware PSU
RUNBOOK 10 / 17
Onsite PSU Status & Failure Alarms
Redundant power supply failure isolation, sensor queries and voltage fluctuation detection.
Hardware Thermals
RUNBOOK 11 / 17
Onsite Fan & Thermal Alarms
Fan RPM speed thresholds, ASIC thermal junction throttling and chassis airflow obstruction audits.
Storage & Boot
RUNBOOK 12 / 17
Onsite Flash Corruption & Read-Only Filesystem
EXT4 filesystem read-only remounts, formatlogdisk scans and BIOS bootloader TFTP recovery.
Hardware RMA
RUNBOOK 13 / 17
Onsite RMA Pre-Verification Matrix
Pre-RMA evidence checklist, hardware test suite execution and fast-track ticket submission.
Remote Ops · Mgmt
RUNBOOK 14 / 17
High CPU Due to httpsd / forticron Daemons & Mgmt Lockout
Triage GUI unresponsiveness, httpsd worker thread exhaustion, forticron automation loops and Local-In Policy defenses.
Zero-Trust & Identity
RUNBOOK 15 / 17
ZTNA Access Proxy with SAML MFA & EMS Device Posture
Azure AD / Okta SAML 2.0 token assertions, FortiClient EMS zero-trust tag synchronization and WAD proxy access policies.
Network & Routing
RUNBOOK 16 / 17
BGP Equal-Cost Multi-Path (ECMP) & Asymmetric Route Optimization
BGP multi-path load sharing, asymmetric TCP session drops, RPF check bypass and NP7 hardware hash balancing.
Zero-Trust & Identity
RUNBOOK 17 / 20
SSL-VPN to IPsec / ZTNA Migration & Memory Leak Mitigation
Isolate sslvpnd memory leaks, deploy Local-In geo-restrictions and migrate remote workers to IKEv2 Dial-Up and ZTNA.
Network & Routing
RUNBOOK 18 / 20
VXLAN EVPN Multi-Site DCI & BGP EVPN Triage
Diagnose VTEP encapsulation drops, BGP EVPN Type-2/5 route advertisement failures and NP7 hardware fastpath offload.
Remote Ops · Logging
RUNBOOK 19 / 20
FortiAnalyzer Log Queue Backpressure & Disk Spool Triage
Resolve miglogd queue drops, OFTP/TLS transport disconnections and local flash disk spool exhaustion.
On-Site Tips · Cluster
RUNBOOK 20 / 20
FortiGate HA Dedicated Heartbeat Split-Brain & Session Desync Triage
Diagnose dual-primary split-brain states, isolate faulty heartbeat DAC cables and resolve out-of-sync checksums.