Welcome to the Fortinet Community!

VPN Connection Issue ( Urgent )

Need FortiGate-side workaround: RDP disconnects when client FortiClient VPN connects on internal PCI have a FortiGate 40F running FortiOS 7.4.12.I need to RDP from outside the office to an internal Windows PC at 192.168.1.89. RDP works normally while

682

33 minutes ago

HS08Contributor III

Fnac License

I onboard my WLC to fnac and my WLC contains 5 SSID, let say SSID1 until SSID5.SSID1 to SSID4 using WPA-PSK and SSID5 is 802.1x enabled. With this scenario there is no authentication request from WLC to the NAC If the client connect from one from SSI

321

51 minutes ago

gs123New Member

New migration tool available. Looking for feedback.

Hi all,I've made a free firewall migration tool, now available on GitHub: https://github.com/gateshift/gateshiftIt's still in beta, and feedback from people who actually do this work would be welcome.If you run firewall migrations or optimizations, g

571

MOGTABA-DiyarNew Member

Implementation Guide: Aruba Guest Wi-Fi + FortiAuthenticator SMS OTP

dear im going to deployed FortiAuthenticator as external captive portal , guest user will connect to Aruba WLC please guide me to achieve this

955

wcruvinelStaff

Technical Tip: Packet loss passing through interfaces of type 'Redundant'

Description This article describes a software issue that causes packet loss, authentication failures, and session drops when using interfaces of type 'redundant' on specific FortiGate models and FortiOS versions. Scope FortiGate-70/71G, 90/91

9782

J

iruma77New Member

Blocking intra-SSID traffic and AirPrint

This isn't as dumb as it sounds at first glance, I promise! No, I'm not trying to print to a printer that is wirelessly connected to the same SSID, which would obviously be blocked by this setting.I'm trying to set up a wireless network for guests to

232

rfahmi1New Member

Fortianalyzer VM No Space Left on the Device Error

Hello,  I run this VM New deployment of FortiAnalyzer for VMware FAZ_VM64-v7.6.4.F-build3579-FORTINET.out.ovf.zip (477.27 MB) on VMware but I'm getting this error not sure what might be the reason.Any help would be appreciated. &n

5133

gmachavarianiStaff

Technical Tip: SSL/TLS CBC ciphers reported on the SAML authentication port (11444) on FortiGate

DescriptionThis article describes a vulnerability scan finding that reports support for SSL/TLS Cipher Block Chaining (CBC) mode ciphers on the SAML authentication port of the FortiGate, together with a workaround to remove CBC cipher support from th

100

Troubleshooting Tip: Understanding and resolving 'duplicate license' errors on FortiAnalyzer and FortiManager VMs

rmagdalchukStaff

FortiManager

DescriptionThis article explains why administrators might encounter an 'Invalid license Duplicated' or 'duplicate license has been detected' error on FortiAnalyzer and FortiManager Virtual Machines. It covers how the licensing mechanism relies on the

140

skrymiStaff

Technical Tip: 'The connected FortiAnalyzer does not support the feature' error on ATP widget after upgrading to FortiOS v7.6

DescriptionThis article describes why the Advanced Threat Protection Statistics widget stops showing data and throws the warning 'The connected FortiAnalyzer does not support the feature' after upgrading to FortiOS v7.6. ScopeFortiOS v7.6 or higher.

80

eliaslatifExplorer II

VPN Connection Issue ( Urgent )

Need FortiGate-side workaround: RDP disconnects when client FortiClient VPN connects on internal PCI have a FortiGate 40F running FortiOS 7.4.12.I need to RDP from outside the office to an internal Windows PC at 192.168.1.89. RDP works normally while

682

33 minutes ago

HS08Contributor III

Fnac License

I onboard my WLC to fnac and my WLC contains 5 SSID, let say SSID1 until SSID5.SSID1 to SSID4 using WPA-PSK and SSID5 is 802.1x enabled. With this scenario there is no authentication request from WLC to the NAC If the client connect from one from SSI

321

51 minutes ago

gs123New Member

New migration tool available. Looking for feedback.

Hi all,I've made a free firewall migration tool, now available on GitHub: https://github.com/gateshift/gateshiftIt's still in beta, and feedback from people who actually do this work would be welcome.If you run firewall migrations or optimizations, g

571

MOGTABA-DiyarNew Member

Implementation Guide: Aruba Guest Wi-Fi + FortiAuthenticator SMS OTP

dear im going to deployed FortiAuthenticator as external captive portal , guest user will connect to Aruba WLC please guide me to achieve this

955

iruma77New Member

Blocking intra-SSID traffic and AirPrint

This isn't as dumb as it sounds at first glance, I promise! No, I'm not trying to print to a printer that is wirelessly connected to the same SSID, which would obviously be blocked by this setting.I'm trying to set up a wireless network for guests to

232

rfahmi1New Member

Fortianalyzer VM No Space Left on the Device Error

Hello,  I run this VM New deployment of FortiAnalyzer for VMware FAZ_VM64-v7.6.4.F-build3579-FORTINET.out.ovf.zip (477.27 MB) on VMware but I'm getting this error not sure what might be the reason.Any help would be appreciated. &n

5133

llmgodVisitor II

Lua scripting support

I'm developing a custom IPS signature for FortiOS 7.4 and want to understand the Lua scripting support in custom IPS rules. Specifically:(1) Can custom IPS rules written in Lua access the os and io modules?(2) Are there any sandboxing restrictions on

120

4 hours ago

heounNew Member

FortiManager: mass deploy of a "trusted" CA certificate

Hello,I'm deploying a trusted CA certificate to a number of Fortigates devices that are in sync with FortiManager.This is not for full SSL inspection, but for trusting SSL connections to internal servers (the ones that go into Remote CA Certificates)

222

4 hours ago

usmanNew Member

fortimanager not registering ?

hi,  we have recently upgraded our foritmanager, this fortimanager is already present as our asset in forticloud. When we upgraded our fortimanager, we checked it was not registered. when we enter the credentials to register it, it said the

19902

GalagoNew Member

Not working FortiClient 7.4.6.0218 android 17 with fortios 7.6.7 =( When update in google play store?

Not working FortiClient 7.4.6.0218 android 17 with fortios 7.6.7 =( When update in google play store? PC/Mac works good

111

5 hours ago

wcruvinelStaff

Technical Tip: Packet loss passing through interfaces of type 'Redundant'

Description This article describes a software issue that causes packet loss, authentication failures, and session drops when using interfaces of type 'redundant' on specific FortiGate models and FortiOS versions. Scope FortiGate-70/71G, 90/91

9782

J

gmachavarianiStaff

Technical Tip: SSL/TLS CBC ciphers reported on the SAML authentication port (11444) on FortiGate

DescriptionThis article describes a vulnerability scan finding that reports support for SSL/TLS Cipher Block Chaining (CBC) mode ciphers on the SAML authentication port of the FortiGate, together with a workaround to remove CBC cipher support from th

100

Troubleshooting Tip: Understanding and resolving 'duplicate license' errors on FortiAnalyzer and FortiManager VMs

rmagdalchukStaff

FortiManager

DescriptionThis article explains why administrators might encounter an 'Invalid license Duplicated' or 'duplicate license has been detected' error on FortiAnalyzer and FortiManager Virtual Machines. It covers how the licensing mechanism relies on the

140

skrymiStaff

Technical Tip: 'The connected FortiAnalyzer does not support the feature' error on ATP widget after upgrading to FortiOS v7.6

DescriptionThis article describes why the Advanced Threat Protection Statistics widget stops showing data and throws the warning 'The connected FortiAnalyzer does not support the feature' after upgrading to FortiOS v7.6. ScopeFortiOS v7.6 or higher.

80

A

Anonymous_UserContributor III

Technical Tip: How to transfer a file to a connected FortiGate

Description   This procedure is only for Fortigates properly configured and connected to a FortiManager.   1) Open Device Manager and select Tools.   2) Select Transfer File.   3) Choose what type of file to transfer:

13991

srajeswaranStaff

Technical Tip: Understanding FGCP interface monitoring and remote link monitoring when configured together

DescriptionThis article describes the behavior of FGCP interface monitoring and remote link monitoring when both are configured on the same FortiGate HA cluster.ScopeFortiGate.SolutionInterface monitoring and remote link monitoring can be configured

221

L

5 hours ago

sinanalshokerStaff

Technical Tip: Use the FortiGate API to recover an IPsec pre-shared key in plain text format

Description This article describes how to recover an IPsec pre-shared key in plain text format using the FortiGate API. Scope FortiGate. Solution Note: This article assumes that the admin has an IPsec tunnel set up with a pre-shared key defin

158482