Welcome to the Fortinet Community!

Fortigate SSL VPN

Hi..My FGT Hub and Spoke run under verrsion 7.2.11, the hub act as SSL VPN and connection from spoke to hub using ADVPN.As we know in new version of Fortigate then SSL VPN is retired and replaced by IPSEC VPN. Witht his condition i want to know :What

redialNew Member

Hello all, I've been asked by a small pharmacy to install a firewall for their network. I am looking into the FortiGate 30E in this case because there are not many devices on the network (around 10-15). I am wondering if anybody here has do

63675

A

41 minutes ago

Jahirul IslamNew Member

FortiClient EMS Signature Update

Hello there,I want to update FortiClient EMS signature manually. FortiClient EMS 7.4.7. My deployment mode is airgap. I have downloaded the service updates from support.fortinet.com.Now how I can insert it to EMS server.Kindly help me on this.

70

candawiStaff

Technical Tip: Use web filter to block all sites except Gmail

Description   This article describes how to use web filters to block most sites and allow Gmail access only. When tested, the browser is still able to show browser results such as images. See samples below:        Scope &nbs

ShirshakVisitor III

FortiSIEM - Slow Incident Tab

We are currently experiencing an issue where the Incident tab is taking a significant amount of time to load. While the list of incidents is displayed after opening the Incident tab, navigating to other sections within the Incident module is extremel

90

osoleimaniStaff

Technical Tip: Performing the initial startup and configuration of a FortiGate VM running FortiOS v8.0

DescriptionThis article describes how to perform the initial startup and configuration of a FortiGate VM running FortiOS 8.0 after deployment in VMware Workstation Pro. The procedure transforms a newly deployed virtual appliance into a reachable, lic

80

sbrooks1Staff

Technical Tip: FortiGate sets the most significant bit of the sequence number to 1 in GTPv2 Delete Session Request after tunnel timeout

DescriptionThis article describes how the FortiGate behaves when sending Delete Session Requests to the SGW/PGW when a GTPv2 tunnel times out.ScopeBelow FortiOS v7.4.10, v7.6.5, v8.0.0.SolutionIn 3GPP telecommunications, a Delete Session Request is a

Technical Tip: Policy lookup behavior on FortiManager

NourStaff

FortiManager

DescriptionThis article describes how the policy lookup behavior works on FortiManager, as well as common issues that may be encountered.ScopeFortiGate, FortiManager.SolutionNote that the policy lookup function on FortiManager is derived from the Pol

40

Troubleshooting Tip: FortiNAC Unable to Parse Syslog sent from FortiAnalyzer and generate a Security Event.

HatibiStaff & Editor

FortiNAC-F

DescriptionThis article describes how to troubleshoot cases where FortiNAC is unable to parse Syslog messages and generate a Security Event when receiving UTM events from FortiAnalyzer.ScopeFortiNAC-F, FortiAnalyzer.SolutionFor detailed configuration

HS08Visitor III

Hi..My FGT Hub and Spoke run under verrsion 7.2.11, the hub act as SSL VPN and connection from spoke to hub using ADVPN.As we know in new version of Fortigate then SSL VPN is retired and replaced by IPSEC VPN. Witht his condition i want to know :What

redialNew Member

Hello all, I've been asked by a small pharmacy to install a firewall for their network. I am looking into the FortiGate 30E in this case because there are not many devices on the network (around 10-15). I am wondering if anybody here has do

63675

A

41 minutes ago

Jahirul IslamNew Member

FortiClient EMS Signature Update

Hello there,I want to update FortiClient EMS signature manually. FortiClient EMS 7.4.7. My deployment mode is airgap. I have downloaded the service updates from support.fortinet.com.Now how I can insert it to EMS server.Kindly help me on this.

70

ShirshakVisitor III

FortiSIEM - Slow Incident Tab

We are currently experiencing an issue where the Incident tab is taking a significant amount of time to load. While the list of incidents is displayed after opening the Incident tab, navigating to other sections within the Incident module is extremel

90

AEKSuperUser

FortiGate 7.6.7: blank page on loading GUI after upgrade

Source IP for cert probe

Hi FGT adminsFortiOS 7.4.12. All HTTPS sited are blocked with error: “SSL connection is blocked due to unable to retrieve server's certificate”.In the latest FOS updates the FGT probes the certificate itself (self generated traffic) before allowing o

NetRyszardNew Member

I've noticed an extremely strange thing upon upgrading some test FortiGates to the new version 7.6.7: the upgrade goes fine, and the FortiGate is happily online and is routing/firewalling-just fine. However, when trying to load the GUI it is just a b

csmgrNew Member

Blocking by the Tailscale application on Fortigate

Fortigate can block the Tailscale application with policy and application control; it will block both inbound Tailscale sessions and outbound Tailscale sessions. Is it possible to block only inbound Tailscale sessions, and still allow outbound Tailsc

HS08Visitor III

Forinac sometime not send CoA

If the endpoint was idle for some time then when i change the group on the NAC, I can see the fortinac not send the CoA to the switch.We can see here the last fnac send the CoA is 14:02:18 then i change the group for that host at 14:30 and there is n

561

10 hours ago

HS08Visitor III

Fnac Vlan Change Inventory

When i move endpoint to another host role the on the policy the endpoint should get a new vlan (37) but why in the inventory the endpoint still use old vlan (32) and i must wait up to 3 minutes then the vlan is changed?

130

11 hours ago

MarkusKoehlerNew Member

Windows updates fails with enabled Forticlient

Since last week we experiencing a lot of problems with Windows updates (mostly Windows 11, but there was one Windows 10 among them as well), specifically KB5040442. On about 10% of our Windows clients the update would start and go until 96% and stay

HatibiStaff & Editor

Technical Tip: FortiNAC Automated Incident Response based on FortiAnalyzer security events

DescriptionThis article describes how to validate the integration between FortiNAC and FortiAnalyzer with regards to incident response.ScopeFortiNAC-F, FortiAnalyzerSolutionIn this scenario, FortiNAC responds to security incidents based on syslog mes

20

6 minutes ago

candawiStaff

Technical Tip: Use web filter to block all sites except Gmail

Description   This article describes how to use web filters to block most sites and allow Gmail access only. When tested, the browser is still able to show browser results such as images. See samples below:        Scope &nbs

osoleimaniStaff

Technical Tip: Performing the initial startup and configuration of a FortiGate VM running FortiOS v8.0

DescriptionThis article describes how to perform the initial startup and configuration of a FortiGate VM running FortiOS 8.0 after deployment in VMware Workstation Pro. The procedure transforms a newly deployed virtual appliance into a reachable, lic

80

sbrooks1Staff

Technical Tip: FortiGate sets the most significant bit of the sequence number to 1 in GTPv2 Delete Session Request after tunnel timeout

DescriptionThis article describes how the FortiGate behaves when sending Delete Session Requests to the SGW/PGW when a GTPv2 tunnel times out.ScopeBelow FortiOS v7.4.10, v7.6.5, v8.0.0.SolutionIn 3GPP telecommunications, a Delete Session Request is a

Technical Tip: Policy lookup behavior on FortiManager

NourStaff

FortiManager

DescriptionThis article describes how the policy lookup behavior works on FortiManager, as well as common issues that may be encountered.ScopeFortiGate, FortiManager.SolutionNote that the policy lookup function on FortiManager is derived from the Pol

40

Troubleshooting Tip: FortiNAC Unable to Parse Syslog sent from FortiAnalyzer and generate a Security Event.

HatibiStaff & Editor

FortiNAC-F

DescriptionThis article describes how to troubleshoot cases where FortiNAC is unable to parse Syslog messages and generate a Security Event when receiving UTM events from FortiAnalyzer.ScopeFortiNAC-F, FortiAnalyzer.SolutionFor detailed configuration

Customer Service Note: Email interaction when working tickets with Fortinet Support

3 hours ago

A

Anonymous_UserContributor III

Customer Service

Description   This article describes a feature deployed in January 2019.The 'Email Interaction' feature allows the choice of whether ticket updates can be handled via email.  This avoids the need to log into the Support Portal to read the

jieStaff

Troubleshooting Tip: 'Unit snmpd.service is masked' when upgrading EMS

DescriptionThis article describes how to resolve the issue 'Unit snmpd.service is masked' when upgrading ForitClient EMS to v7.4.x.ScopeFortiClient EMS v7.4.SolutionIssue description:When upgrading EMS from v7.4 versions to any later version, the fol

5 hours ago

ailopezStaff

Technical Tip: FortiGate GUI Issue with error 'Connection to the FortiGate was lost temporarily. You may need to refresh the current page.'

DescriptionThis article describes a FortiGate GUI issue where the GUI crashes and the HTTPS session disconnects when attempting to open multiple GUI pages.ScopeFortiGate, FortiSwitch.SolutionUnexpected behaviour has been identified after upgrading to

200

5 hours ago

osoleimaniStaff