FERRITAAS Incident & Triage
Main Platform
Enterprise Field Guidance · 13 Active Runbooks

Interactive Web Field Runbooks

Step-by-step closed-loop diagnostic workflows fusing official Fortinet Admin Guides with 10+ real-world TAC Knowledge Base articles. Each runbook includes pre-flight baselines, surgical execution CLI, live impact telemetry diffs and 1-click rollbacks.

VPN & BGP RUNBOOK 01 / 17
Hub-and-Spoke ADVPN with BGP Shortcuts
Dynamic spoke-to-spoke IPsec shortcuts, auto-discovery receiver, TCP MSS clamping and next-hop self override.
⚡ Closed-Loop Active 8 KBs Consolidated
Secure SD-WAN RUNBOOK 02 / 17
SD-WAN Performance SLA & Dynamic Multi-Path Steering
Multi-path steering thresholds, jitter/packet loss damping and probe integer wrap bug fixes.
⚡ Closed-Loop Active 11 KBs Consolidated
High Availability RUNBOOK 03 / 17
HA Active-Passive Sub-Table Checksum Diffs
18 configuration sub-table checksum mismatches, recalculations and remote gateway split-brain tripwires.
⚡ Closed-Loop Active 12 KBs Consolidated
Kernel & Memory RUNBOOK 04 / 17
WAD & IPS Process Memory Recovery
Zero-downtime worker recycling, memory bloat isolation and worker-count tuning.
⚡ Closed-Loop Active 10 KBs Consolidated
Kernel & Memory RUNBOOK 05 / 17
Understanding Conserve Mode Thresholds
Red, Extreme and Green transition states, session drop mechanics and memory protection tuning.
⚡ Closed-Loop Active 9 KBs Consolidated
Kernel & Memory RUNBOOK 06 / 17
Reduce Memory Use & Avoid Conserve Mode
Session TTL tuning, TCP buffer optimization and proxy-mode memory shedding on 2GB RAM models.
⚡ Closed-Loop Active 8 KBs Consolidated
System & Updates RUNBOOK 07 / 17
FortiGuard Update Memory Spikes
Antivirus & IPS signature database unpack buffers, AV engine memory clamping and update stagger.
⚡ Closed-Loop Active 7 KBs Consolidated
Diagnostics & TAC RUNBOOK 08 / 17
Collect High Memory TAC Logs
Comprehensive debug report bundles, slabinfo leak inspection and crashdump extraction for Fortinet TAC.
⚡ Closed-Loop Active 10 KBs Consolidated
Hardware Optics RUNBOOK 09 / 17
Onsite SFP Link Flapping & Low RX Power
Optical DDM transceiver diagnostics, dBm power thresholds and dirty fiber cleaning protocols.
⚡ Closed-Loop Active 8 KBs Consolidated
Hardware PSU RUNBOOK 10 / 17
Onsite PSU Status & Failure Alarms
Redundant power supply failure isolation, sensor queries and voltage fluctuation detection.
⚡ Closed-Loop Active 6 KBs Consolidated
Hardware Thermals RUNBOOK 11 / 17
Onsite Fan & Thermal Alarms
Fan RPM speed thresholds, ASIC thermal junction throttling and chassis airflow obstruction audits.
⚡ Closed-Loop Active 7 KBs Consolidated
Storage & Boot RUNBOOK 12 / 17
Onsite Flash Corruption & Read-Only Filesystem
EXT4 filesystem read-only remounts, formatlogdisk scans and BIOS bootloader TFTP recovery.
⚡ Closed-Loop Active 9 KBs Consolidated
Hardware RMA RUNBOOK 13 / 17
Onsite RMA Pre-Verification Matrix
Pre-RMA evidence checklist, hardware test suite execution and fast-track ticket submission.
⚡ Closed-Loop Active 10 KBs Consolidated
Remote Ops · Mgmt RUNBOOK 14 / 17
High CPU Due to httpsd / forticron Daemons & Mgmt Lockout
Triage GUI unresponsiveness, httpsd worker thread exhaustion, forticron automation loops and Local-In Policy defenses.
⚡ 7 KBs Consolidated ⚡ NEW (14m ago)
Zero-Trust & Identity RUNBOOK 15 / 17
ZTNA Access Proxy with SAML MFA & EMS Device Posture
Azure AD / Okta SAML 2.0 token assertions, FortiClient EMS zero-trust tag synchronization and WAD proxy access policies.
⚡ 11 KBs Consolidated ⚡ NEW (Just now)
Network & Routing RUNBOOK 16 / 17
BGP Equal-Cost Multi-Path (ECMP) & Asymmetric Route Optimization
BGP multi-path load sharing, asymmetric TCP session drops, RPF check bypass and NP7 hardware hash balancing.
⚡ 10 KBs Consolidated ⚡ NEW (Just now)
Zero-Trust & Identity RUNBOOK 17 / 20
SSL-VPN to IPsec / ZTNA Migration & Memory Leak Mitigation
Isolate sslvpnd memory leaks, deploy Local-In geo-restrictions and migrate remote workers to IKEv2 Dial-Up and ZTNA.
⚡ 12 KBs Consolidated ⚡ NEW
Network & Routing RUNBOOK 18 / 20
VXLAN EVPN Multi-Site DCI & BGP EVPN Triage
Diagnose VTEP encapsulation drops, BGP EVPN Type-2/5 route advertisement failures and NP7 hardware fastpath offload.
⚡ 11 KBs Consolidated ⚡ NEW (Just now)
Remote Ops · Logging RUNBOOK 19 / 20
FortiAnalyzer Log Queue Backpressure & Disk Spool Triage
Resolve miglogd queue drops, OFTP/TLS transport disconnections and local flash disk spool exhaustion.
⚡ 10 KBs Consolidated ⚡ NEW (Just now)
On-Site Tips · Cluster RUNBOOK 20 / 20
FortiGate HA Dedicated Heartbeat Split-Brain & Session Desync Triage
Diagnose dual-primary split-brain states, isolate faulty heartbeat DAC cables and resolve out-of-sync checksums.
⚡ 12 KBs Consolidated ⚡ NEW (Just now)