Fortinet Community

Technical Tip: Automation stitch for the admin login and logout

Description This article describes how to create an automation stitch admin user login and logout. Scope FortiGate v6.4 and above. Solution FortiGate creates a log when an Admin user logs in and logs out the FortiGate.   Login event: &nb

39081

45 minutes ago

FreddmNew Member

Chained FortiAP only visible in LLDP but not under Managed FortiAP

Hello,I have a new setup with one Fortigate 70g and 2 FortiAP FAP-243K.The Fortigate is configured in Transparent mode and evreything with a fixed ip in the same subnet/vlan. Everything is on the latest firmware.When connected on 2 ports of the Forti

20

srajeswaranStaff

Troubleshooting Tip: FortiSwitch does not discover the FortiGate when DHCP option 138 is missing

DescriptionThis article describes how to troubleshoot FortiGate controller discovery on FortiSwitch when DHCP option 138 is not received on the FortiLink interface.ScopeFortiGate, FortiSwitch.SolutionWhen DHCP is used for FortiLink controller discove

30

Troubleshooting Tip: How to fix error 'object set operator error, -204 discard the setting' when creating an administrator with an SSH-Public-Key

mrafatStaff

FortiManager

DescriptionThis article describes how to resolve the Error 'Object set Operator error,-204 discard the setting' when creating an administrator with SSH-Public-key.ScopeFortiManager-VM, FortiManager appliances.SolutionThe error when creating the admin

80

srajeswaranStaff

Technical Tip: How to carry user VLAN traffic over FortiLink between FortiSwitch and FortiGate

DescriptionThis article describes how to configure and verify user VLAN traffic over the FortiLink connection between FortiSwitch and FortiGate.ScopeFortiGate, FortiSwitch.SolutionAn active FortiLink carries data traffic in addition to the management

70

muhammadmoizVisitor III

FortiClient on an Ubuntu

I am currently installing FortiClient on an Ubuntu 24.04.4 LTS VM. However, when I open FortiClient, the IPsec VPN option is not available/disappears from the VPN section. Could you please confirm whether the installed FortiClient version/package sup

191

OsamaFattohExplorer II

FortiSIEM shards and replicas

Hello all,If I have one Supervisor node and then add one Worker node in the same shard, the Supervisor would be Replica 1 and the Worker would be Replica 2.The Hot Tier on the Supervisor is /dev/sde, mounted on /data-clickhouse-hot-1, while on the Wo

332

2 hours ago

A

Aditya2745Visitor III

Best practice for FortiSIEM 7.4.0 to 7.5.1 HA migration with ClickHouse on-prem

Hi Everyone,I need help to migrate a FortiSIEM deployment to new VMs in an on-prem VMware environment and could use some guidance on the proper workflow.Current setup: FortiSIEM 7.4.0 (Single-node Supervisor) on on-prem VMware ClickHouse datastore

1194

lmfvdeskNew Member

Kernel Boot Trap between Forticlient and Dell Pro 3 14260

Hello,I’m creating this Topic because I’m facing an issue that neither me, Dell or our Forticlient provider faced before and we both have no idea what exactly is going on. We ordered a batch of Dell Computer Pro 3 14260. Those computers are facing ke

13110

FreddmNew Member

Chained FortiAP only visible in LLDP but not under Managed FortiAP

Hello,I have a new setup with one Fortigate 70g and 2 FortiAP FAP-243K.The Fortigate is configured in Transparent mode and evreything with a fixed ip in the same subnet/vlan. Everything is on the latest firmware.When connected on 2 ports of the Forti

20

muhammadmoizVisitor III

FortiClient on an Ubuntu

I am currently installing FortiClient on an Ubuntu 24.04.4 LTS VM. However, when I open FortiClient, the IPsec VPN option is not available/disappears from the VPN section. Could you please confirm whether the installed FortiClient version/package sup

191

OsamaFattohExplorer II

FortiSIEM shards and replicas

Hello all,If I have one Supervisor node and then add one Worker node in the same shard, the Supervisor would be Replica 1 and the Worker would be Replica 2.The Hot Tier on the Supervisor is /dev/sde, mounted on /data-clickhouse-hot-1, while on the Wo

332

2 hours ago

A

Aditya2745Visitor III

Best practice for FortiSIEM 7.4.0 to 7.5.1 HA migration with ClickHouse on-prem

Hi Everyone,I need help to migrate a FortiSIEM deployment to new VMs in an on-prem VMware environment and could use some guidance on the proper workflow.Current setup: FortiSIEM 7.4.0 (Single-node Supervisor) on on-prem VMware ClickHouse datastore

1194

lmfvdeskNew Member

Kernel Boot Trap between Forticlient and Dell Pro 3 14260

Hello,I’m creating this Topic because I’m facing an issue that neither me, Dell or our Forticlient provider faced before and we both have no idea what exactly is going on. We ordered a batch of Dell Computer Pro 3 14260. Those computers are facing ke

13110

Frg3 42New Member

Forticlient VPN Only 7.4.3 - FortiGuard Anycast CA certificate expiration

Good morning, I have a question regarding FortiClient VPN Only and the expiration of the FortiGuard Anycast CA certificate, which is scheduled for October 10. When I contacted Fortinet support, I was told that version 7.4.3 (the only version availabl

240

droehrigNew Member

Forticlient EMS Endpoint Notified

After an auto deployment I have many endpoints that only say under Installer- Endpoint Notified but they never updated to the latest version. How do I fix this? It happens every time there is an update to the Forticlient and we do an auto deployment

82906

C

7 hours ago

S

Shaon_AhmedVisitor III

Can any one give me configuration sample for gre over dynamic ipsec for fortigate firewall?

Is it possible to Gre over Dynamic IPsec between Fortigate & mikrotik.Can any one give me configuration sample for gre over dynamic ipsec for fortigate firewall?

642

yktangNew Member

FortiClient Causes MacBook Air M5 Wi-Fi and Bluetooth Error and Force Reboots

Hello, our organization recently obtained a few MacBook Neos and Airs to test, running on macOS 27 Golden Gate. However, after installing FortiClient and connected to the office network, at random times, the Wi-Fi and Bluetooth would switch off and c

260

JassongaryNew Member

NSE 4 / FortiOS 7.6: What Actually Helped You Prepare?

I’m currently preparing for NSE 4 on FortiOS 7.6, and one thing I’ve noticed is that going through the study material and actually being able to troubleshoot a FortiGate scenario are two very different things.So I wanted to hear from people who have

261

12 hours ago

SheikhStaff

FortiNAC-F

Troubleshooting Tip: SSH remote backup fails after upgrade with scp 'dest open' error

DescriptionThis article describes why the SSH Remote Backup and the Test SSH Connection button fail with scp errors of the form dest open "<path>": No such file or directory after a FortiNAC-F software upgrade, when the remote backup target pre

30

18 minutes ago

nithincsStaff & Editor

Technical Tip: Automation stitch for the admin login and logout

Description This article describes how to create an automation stitch admin user login and logout. Scope FortiGate v6.4 and above. Solution FortiGate creates a log when an Admin user logs in and logs out the FortiGate.   Login event: &nb

39081

45 minutes ago

srajeswaranStaff

Troubleshooting Tip: FortiSwitch does not discover the FortiGate when DHCP option 138 is missing

DescriptionThis article describes how to troubleshoot FortiGate controller discovery on FortiSwitch when DHCP option 138 is not received on the FortiLink interface.ScopeFortiGate, FortiSwitch.SolutionWhen DHCP is used for FortiLink controller discove

30

Troubleshooting Tip: How to fix error 'object set operator error, -204 discard the setting' when creating an administrator with an SSH-Public-Key

mrafatStaff

FortiManager

DescriptionThis article describes how to resolve the Error 'Object set Operator error,-204 discard the setting' when creating an administrator with SSH-Public-key.ScopeFortiManager-VM, FortiManager appliances.SolutionThe error when creating the admin

80

srajeswaranStaff

Technical Tip: How to carry user VLAN traffic over FortiLink between FortiSwitch and FortiGate

DescriptionThis article describes how to configure and verify user VLAN traffic over the FortiLink connection between FortiSwitch and FortiGate.ScopeFortiGate, FortiSwitch.SolutionAn active FortiLink carries data traffic in addition to the management

70

kchengStaff & Editor

Technical Tip: Recommended setting on antivirus profile to block attack simulation performed by Picus security client

DescriptionThis article describes the recommended Antivirus profile settings when FortiGate does not block attack simulation by the Picus Security Emulator.ScopeFortiGate.SolutionPicus Security is the client installed in the customer environment to d

90

Technical Tip: How to configure auto-housekeep email to more than 3 days in FortiMail Server mode

pcheeStaff

FortiMail

DescriptionThis article describes how to configure the auto-housekeep email to more than 3 days in FortiMail Server mode.ScopeFortiMail Server mode.SolutionNavigate under Profile -> Resource -> Resource.Select the default resource profile and e

70

Troubleshooting Tip: How to resolve 'Error importing configuration file' in FortiClient on macOS

rtanagrasStaff & Editor

FortiClient

DescriptionThis article describes how to resolve the 'Error importing configuration file' message when importing a modified FortiClient configuration file on macOS.ScopeFortiClient.SolutionWhen importing a FortiClient configuration file through the F

70

Technical Tip: HA member status is 'Wrong Build' during the upgrade

G

gyilmazStaff

FortiMail

DescriptionThis article explains the meaning of 'Wrong Build', which is shown under the status field of one of the members during an HA upgrade. ScopeFortiMail.SolutionDuring the upgrade of HA members, under the menu System -> High Availability -&

140

G

Troubleshooting Tip: Replacement FortiWeb shows as Offline/Down in FortiAnalyzer after RMA

manasacStaff

FortiAnalyzer

DescriptionThis article describes why a replacement FortiWeb (RMA or hardware failure) appears as Offline/Down in FortiAnalyzer, and how to fix it by updating the device serial number.After a FortiWeb is replaced because of a hardware failure or RMA,

70