Welcome to the Fortinet Community!

Technical Tip: FortiGate unable to access several FortiGuard services due to CRL scope errors (September 2026)

DescriptionThis article provides information on a recent issue (reported 2026-09-09) where FortiGates are unable to access several FortiGuard services that utilize certificates signed by DigiCert High Assurance EV Root CA.ScopeFortiGate, FortiProxy,

334006

22 minutes ago

HS08Contributor III

Capture Fortigate Interface Data in and out

For cost tracking purpose then i need to capture how much data transferred (in and out) from my onprem to the azure and vice versa. Can we capture it from tunnel interface? If yes then can i know how?

60

33 minutes ago

jfelix09Staff

Troubleshooting Tip: 'Outgoing interface' and 'Type' fields empty in a ztna-proxy firewall proxy-policy object in FortiGate

DescriptionThis article describes a situation where the 'Outgoing Interface' and 'Type' fields are displayed as empty in a firewall proxy-policy object of type ztna-proxy in the FortiGate GUI, despite being correctly configured in the CLI, and furthe

40

50 minutes ago

heljagStaff

Troubleshooting Tip: Firewall policies source/destination addresses not showing in alphabetic order

DescriptionThis article describes why objects are not sorted alphabetically in firewall policies.ScopeFortiGate v7.4 or above.SolutionIn v7.2.12 or below, objects in firewall policies were sorted alphabetically:Starting from v7.4.8/v7.6.4, objects ar

50

55 minutes ago

smallickStaff

FortiRecon

Outbreak Alert: Orkes Conductor Evaluator Remote Code Execution

FortiRecon Digital Risk Protection (DRP), a SaaS-based service, includes External Attack Surface Management, Brand Protection, and Adversary Centric Intelligence.Adversary Centric Intelligence (ACI): leverages FortiGuard Threat Analysis to provide co

40

59 minutes ago

idubewarStaff

FortiSOAR

Troubleshooting Tip: How to resolve FortiAI connector connectivity issues

DescriptionThis article describes the actions to take whenever the FortiAI connector fails to establish connectivity with the FortiAI server.ScopeFortiSOAR.SolutionUsers may encounter the following error when attempting to use the FortiAI connector:

60

Abin_FTNTStaff

Technical Tip: Understanding 'IPsec Phase1 SA Deleted' Log Message

Description   This article explains the meaning of the log message 'IPsec phase1 SA deleted' and how it assists in understanding the process of IPsec VPN negotiation. The log entry provides key insights into the deletion of a Phase 1 Securi

339271

chungdaoExplorer

How to classify Company-owned and Personal devices based on MAC address in FortiNAC 7.6.x?

Hi Everyone,We have a predefined list of company-owned MAC addresses. We want FortiNAC to classify devices whose MAC addresses are in this list as Company Devices, while devices whose MAC addresses are not in the list should be classified as Personal

171

JanseurbeNew Member

Recurring issue with activating the VM evaluation license — Serial number FGVMEVKLM66LZP57

Hello,I am consistently unable to activate my FortiGate VM evaluation license,despite multiple attempts using different versions andconfirmed network connectivity. License information:- Serial number: FGVMEVKLM66LZP57- Type: VM (KVM) evaluation licen

170

FortiArtStaff

Technical Tip: Phase-1 ip-fragmentation post and pre-encapsulation settings and their relation to firewall settings

Description This article describes the effects of the IPSec vpn phase-1 settings ip-fragmentation post-/pre-encapsulation on the MTU of a source PC when a 'don’t fragment' (DF) bit is set. Their relationship with the firewall policy settings tcp-m

68111

HS08Contributor III

Capture Fortigate Interface Data in and out

For cost tracking purpose then i need to capture how much data transferred (in and out) from my onprem to the azure and vice versa. Can we capture it from tunnel interface? If yes then can i know how?

60

33 minutes ago

chungdaoExplorer

How to classify Company-owned and Personal devices based on MAC address in FortiNAC 7.6.x?

Hi Everyone,We have a predefined list of company-owned MAC addresses. We want FortiNAC to classify devices whose MAC addresses are in this list as Company Devices, while devices whose MAC addresses are not in the list should be classified as Personal

171

JanseurbeNew Member

Recurring issue with activating the VM evaluation license — Serial number FGVMEVKLM66LZP57

Hello,I am consistently unable to activate my FortiGate VM evaluation license,despite multiple attempts using different versions andconfirmed network connectivity. License information:- Serial number: FGVMEVKLM66LZP57- Type: VM (KVM) evaluation licen

170

Yasser1Visitor III

FS-124F-POE – Product Lifecycle and Remaining Support Period

Dear Community Team,Could you please confirm the current Product Lifecycle status of the FortiSwitch FS-124F-POE?Specifically, I would like to confirm: Has an End of Order (EOO) date been officially announced for the FS-124F-POE? Has an End of Sup

191

YafogneNew Member

Recertify Fortinet NSE6 NSE7

Hello,I took the recertification assessment. I completed the course and passed the exam, but my certificates have not been updated. It shows that they are set to expire on September 21.What should I do?Thank you for your help.Best regards,

130

ScootysDadNew Member

ignoring request to establish IPsec SA, no policy configured (IKEv1)

This was working fine until I upgraded the firmware to v8.0.0 B0167. It’s an IKEv1 using 3DES/SHA1 both phases. Now this one particular node will not connect. ike V=root:0:IPSec2xxxx:IPSec2xxxx: IPsec SA connect 5 xxx.xxx.xxx.xxx->xxx.xxx.xxx.xx

262

Jotsu4520Explorer

Anomaly with Google Chrome extensions - Forticlient

I have been running FortiClient 7.4.8 on my endpoints, all of which are Windows 11 devices fully compatible with the FortiClient agent.Recently, I have been experiencing an issue with Google Chrome. Whenever FortiClient requires an update and prompts

351

5 hours ago

RavinaNew Member

Fortinac 7.6.7 showing (RADIUS not enabled on device) this error

We are trying DOT1x auth via AD user .Endpoint going in dot1x process and Cisco Switch forward the request to Fortinac but the authentication process is not completing .Continuously showing “RADIUS not enabled on device”.

1862

6 hours ago

S

SerzhanNew Member

mailfilterd stuck at ~100% CPU

mailfilterd stuck at ~100% CPU, FortiMail 8.0.0 build 183 — cause unclearFortiMail 8.0.0 build 183. mailfilterd sits at ~99.8% CPU continuously (not a spike), RSS grown to ~1.5GB (baseline is usually ~100MB). All other processes idle. Session count

783

10 hours ago

ahmadking22Explorer II

Forti Token Mobile Backup/Recovery – Alternative MFA Options

Hi Fortinet Community,I have a question regarding FortiToken Mobile and MFA recovery.I currently have more than 30 FortiTokens installed on my FortiToken Mobile application for different FortiGate/FortiAuthenticator accounts.My concern is the followi

663

10 hours ago

pjangStaff & Editor

Technical Tip: FortiGate unable to access several FortiGuard services due to CRL scope errors (September 2026)

DescriptionThis article provides information on a recent issue (reported 2026-09-09) where FortiGates are unable to access several FortiGuard services that utilize certificates signed by DigiCert High Assurance EV Root CA.ScopeFortiGate, FortiProxy,

334006

22 minutes ago

jfelix09Staff

Troubleshooting Tip: 'Outgoing interface' and 'Type' fields empty in a ztna-proxy firewall proxy-policy object in FortiGate

DescriptionThis article describes a situation where the 'Outgoing Interface' and 'Type' fields are displayed as empty in a firewall proxy-policy object of type ztna-proxy in the FortiGate GUI, despite being correctly configured in the CLI, and furthe

40

50 minutes ago

heljagStaff

Troubleshooting Tip: Firewall policies source/destination addresses not showing in alphabetic order

DescriptionThis article describes why objects are not sorted alphabetically in firewall policies.ScopeFortiGate v7.4 or above.SolutionIn v7.2.12 or below, objects in firewall policies were sorted alphabetically:Starting from v7.4.8/v7.6.4, objects ar

50

55 minutes ago

smallickStaff

FortiRecon

Outbreak Alert: Orkes Conductor Evaluator Remote Code Execution

FortiRecon Digital Risk Protection (DRP), a SaaS-based service, includes External Attack Surface Management, Brand Protection, and Adversary Centric Intelligence.Adversary Centric Intelligence (ACI): leverages FortiGuard Threat Analysis to provide co

40

59 minutes ago

idubewarStaff

FortiSOAR

Troubleshooting Tip: How to resolve FortiAI connector connectivity issues

DescriptionThis article describes the actions to take whenever the FortiAI connector fails to establish connectivity with the FortiAI server.ScopeFortiSOAR.SolutionUsers may encounter the following error when attempting to use the FortiAI connector:

60

Abin_FTNTStaff

Technical Tip: Understanding 'IPsec Phase1 SA Deleted' Log Message

Description   This article explains the meaning of the log message 'IPsec phase1 SA deleted' and how it assists in understanding the process of IPsec VPN negotiation. The log entry provides key insights into the deletion of a Phase 1 Securi

339271

FortiArtStaff

Technical Tip: Phase-1 ip-fragmentation post and pre-encapsulation settings and their relation to firewall settings

Description This article describes the effects of the IPSec vpn phase-1 settings ip-fragmentation post-/pre-encapsulation on the MTU of a source PC when a 'don’t fragment' (DF) bit is set. Their relationship with the firewall policy settings tcp-m

68111

amalskyStaff

Technical Tip: Retrieving FortiGate interface hierarchy and calculating bandwidth utilization via SNMP

DescriptionThis article describes how to retrieve FortiGate interface information and parent/child interface relationships through SNMP, and how to calculate interface bandwidth utilization from standard IF-MIB counters. It also explains the differen

130

Technical Tip: Understanding the FortiGate API Key in FortiNAC-F v7.6.6 for FortiSwitch and FortiAP Integrations

SheikhStaff

FortiNAC-F

DescriptionThis article explains the purpose of the FortiGate API Token (API Key) field exposed on the FortiGate device model in FortiNAC-F v7.6.x, and clarifies how it relates to the existing CLI (System Administrator) and SNMP credentials when Fort

90

wcruvinelStaff