Welcome to the Fortinet Community!

SSH: Did not receive identification string from x.x.x.x

Hi, I got this error when trying to SSH from a specific server: sshd -1 output shows,“This ip x.x.x.x is not blockedfd 7 is not O_NONBLOCK…Did not receive identification string from x.x.x.x” Any KBs related to this? Thank you!

122

1 hour ago

yeowkm99New Member

Fortinet product coverage expiry

We have one FG100E that is nearing end of product support coverage and is arranging for tech refresh.What happens if we cannot replace the firewall in time ?especially the online services ?Support Type Support Level FortiGuard IPS Service

30

2 hours ago

khunsuNew Member

Extreme CPU Usage IPSMonitor

Hey since Last Sunday we have been using 700G in a HA Cluster in our Environment.I do Not have a single Policy using IPS but the CPU Spikes extremly high because of this. After a restart using "Diagnose Test application ipsmonitor 99" the CPU goes do

302

Ammar387New Member

Logs Received by Collector but Not Available in Analytics or Log View

I’m experiencing an issue in FortiSIEM environment where devices are successfully communicating with the collector, but their logs are not available for analysis.Issue DescriptionThe affected devices are present in the CMDB. When expanding the device

91

Matt_BStaff & Editor

Technical Tip: Migrating from FortiGate permanent VM license to subscription license

Description This article describes two methods to migrate an existing FortiGate VM from a permanent VM license to a subscription license, and provides some considerations to evaluate when planning the migration. Scope FortiGate VM, BYOL subscrip

13941

16 hours ago

Great_DaneNew Member

Adding Fortigate VM eval to FortiManager VM eval

Hi everyone, I am trying to add a Fortigate VM eval, generated via the FortiCloud account to the FortiManager VM eval, also generated via the FortiCloud account. So, both units are "self-generated" evals. I am not talking about evals obtained th

rcpdkcExplorer II

FortiAnalyzer total log count

There is an analyzer with version 7.0.13. When you search fortigate log for the last 7 days on Analyzer, pages of logs come up. However, there is no total log count for the last 7 days anywhere on the page. How can I see the total number of traffic l

18894

Q

23 hours ago

salassilvajExplorer III

vpn ssl subinterface stop working but internet is reachable

vpn ssl stop working but internet is reachable,my topology is a sdwan connection to internet from two wan sub interfaces joined as sdwan members into a sdwan-zone, we are using the fortigate lower models and firmware are 7.4.0 and 7.2.4, internet con

672

brandonziotsExplorer

NAC Policy devices clearing out multiple times per day

Hello all. Looking for anybody who has run into this issue and may be able to provide guidance.We have a pair of FGT 70Gs running 7.4.9 connected to a stack of 148F FSWs running 7.2.5. This is our standard stack and we run it at dozens of sites.We ha

7835

mazbiiNew Member

Moved to Forticlient. Very slow when PC is downloading anything

We've moved a bunch of PC's from Anyconnect to Fortclient which has gone well however the big thing we've noticed is that if a host is downloading/streaming something then the Forticlient is affected quite badly.So for example we use Forticlient to c

heyyoExplorer III

SSH: Did not receive identification string from x.x.x.x

Hi, I got this error when trying to SSH from a specific server: sshd -1 output shows,“This ip x.x.x.x is not blockedfd 7 is not O_NONBLOCK…Did not receive identification string from x.x.x.x” Any KBs related to this? Thank you!

122

1 hour ago

yeowkm99New Member

Fortinet product coverage expiry

We have one FG100E that is nearing end of product support coverage and is arranging for tech refresh.What happens if we cannot replace the firewall in time ?especially the online services ?Support Type Support Level FortiGuard IPS Service

30

2 hours ago

khunsuNew Member

Extreme CPU Usage IPSMonitor

Hey since Last Sunday we have been using 700G in a HA Cluster in our Environment.I do Not have a single Policy using IPS but the CPU Spikes extremly high because of this. After a restart using "Diagnose Test application ipsmonitor 99" the CPU goes do

302

Ammar387New Member

Logs Received by Collector but Not Available in Analytics or Log View

I’m experiencing an issue in FortiSIEM environment where devices are successfully communicating with the collector, but their logs are not available for analysis.Issue DescriptionThe affected devices are present in the CMDB. When expanding the device

91

Great_DaneNew Member

Adding Fortigate VM eval to FortiManager VM eval

Hi everyone, I am trying to add a Fortigate VM eval, generated via the FortiCloud account to the FortiManager VM eval, also generated via the FortiCloud account. So, both units are "self-generated" evals. I am not talking about evals obtained th

991614

S

18 hours ago

salassilvajExplorer III

vpn ssl subinterface stop working but internet is reachable

vpn ssl stop working but internet is reachable,my topology is a sdwan connection to internet from two wan sub interfaces joined as sdwan members into a sdwan-zone, we are using the fortigate lower models and firmware are 7.4.0 and 7.2.4, internet con

672

mazbiiNew Member

Moved to Forticlient. Very slow when PC is downloading anything

We've moved a bunch of PC's from Anyconnect to Fortclient which has gone well however the big thing we've noticed is that if a host is downloading/streaming something then the Forticlient is affected quite badly.So for example we use Forticlient to c

the_rockExplorer III

Very slow responses to anything internal when connected to ssl vpn

Hey guys, Please bear with me here, as I work way more with couple other vendors, though I would say Im fairly verse when it comes to Fortinet : - ). Anyway, here is the scenario. Customer purchased 2 brand new 200F firewalls and we have really

enable1179New Member

Slowness over Forticlient to anything internal.

We upgraded the firewalls from 7.4.2 to 7.6.6 and accessing anything internally over the forticlient connection is very slow. Prior to the upgrade everything was good. I have tried changing some of the tcp-mss-send/receive values but nothing seems t

zerefNew Member

Fortiswitch 7.6.6 802.1x Broken?

I am setting up 802.1x with clearpass and most of my switch are running 7.6.1 or lower and are working fine. I upgraded 2 switches this morning to 7.6.6 and now they absolutely refuse to work if I have the 802.1x security policy on the ports. Worked

140

Matt_BStaff & Editor

Technical Tip: Migrating from FortiGate permanent VM license to subscription license

Description This article describes two methods to migrate an existing FortiGate VM from a permanent VM license to a subscription license, and provides some considerations to evaluate when planning the migration. Scope FortiGate VM, BYOL subscrip

13941

16 hours ago

Adolfo_Z_HStaff

FortiAP

Troubleshooting Tip: How to debug RADIUS protocol on the FortiAP CLI

DescriptionThis article describes how to debug the RADIUS protocol on the FortiAP CLI.ScopeFortiAP when managed by FortiEdge Cloud service or deployed with local standalone and local authentication.SolutionWhen FortiAPs are deployed on the FortiEdge

1161

vprabhu_FTNTStaff

Troubleshooting Tip: How to troubleshoot HA synchronization issue using GUI and CLI on FortiGate/FortiProxy

Description This article describes how to troubleshoot HA synchronization issues when a cluster is out of sync.   Scope   FortiGate/FortiProxy.Solution   Ensure both HA units are running the same firmware version. To check the firmware

shahzebStaff

Troubleshooting Tip: Logged-in user information does not populate for hosts with Persistent Agent

DescriptionThis article describes common configuration mistakes that cause missing logged-in user information in the host view.ScopeFortiNAC-F, FortiNAC.SolutionIf the RADIUS Authentication (802.1x) is not used, the Persistent Agent is the only way t

90

Technical Tip: Exporting and viewing historical connection logs for a specific host in FortiNAC GUI

shahzebStaff

FortiNAC-F

DescriptionThis article describes the process of viewing historical logs for a specific device in FortiNAC. In this scenario, the user needs to access the connection logs for a particular host or MAC address to investigate device failures.ScopeFortiN

70

Troubleshooting Tip: FortiDLP packets is rejected by FortiAnalyzer

rmagdalchukStaff

FortiAnalyzer

DescriptionThis article describes common issues when the FortiDLP webhook is configured to send logs to FortiAnalyzer; however, FortiAnalyzer resets the connection.ScopeFortiManager with FortiAnalyzer feature enabled, FortiAnalyzer.SolutionIn some pa

200

Technical Tip: How to query real-server status for a FortiWeb server policy using the REST API

Ahmed_GalalStaff

FortiWeb

DescriptionThis article describes how to use the FortiWeb REST API to query the status of real servers associated with a server policy.ScopeFortiWeb.SolutionStep 1: Generate the authorization token.FortiWeb API requests can be authenticated by placin

70

Troubleshooting Tip: How to delete a stale FortiAP entry in FortiManager after replacement

rmdheepaStaff

FortiManager

DescriptionThis article describes how to resolve an issue where it is not possible to delete a FortiAP after replacing it with a new one using the 'replace' function in the FortiManager GUI.ScopeFortiManager, FortiAP.SolutionIf the old FortiAP is una

340

ezhupaStaff

Troubleshooting Tip: Policy statistics not visible in the GUI.

DescriptionThis article describes a scenario where policy statistics are not visible despite logs being generated for a newly created firewall policy on a FortiGate device.ScopeFortiGate.SolutionTake into consideration the following scenario:A new fi

1060

Ylli_SeitajStaff

Troubleshooting Tip: How to change the FortiCloud account in FortiGate when the password for the old account has been lost

DescriptionThis article describes how to change a FortiCloud account in FortiGate when the password for the old account has been lost.ScopeFortiGate.SolutionFor example, the FortiGate is currently registered with a FortiCloud account user@account1.co

900