Welcome to the Fortinet Community!

DDoS Custom Policy

Issue: my domain xyz.com is build on next js when webiste is loaded xyz.com/_next/static urls are loaded which loads multiple js files , waf ddos policy has threshold 50 req. and multiple js files are when loaded waf suspects it as DDOS attack.... no

151

2 hours ago

I

Imran782New Member

FortiGate GUI Logs Out Immediately After Successful Login in EVE-NG

Hello Fortinet Community,I have installed FortiGate-VM64 FortiOS 8.0.0 in my EVE-NG lab environment.The FortiGate VM boots normally, and I am able to access the GUI login page.Current IssueI can successfully enter my credentials and the GUI appears t

151

2 hours ago

OsamaFattohExplorer II

FortiSOAR community

FortiSOAR root account

Hello everyone,I’m trying to run sudo commands using the csadmin user, but I’m getting the following error:Sorry, user csadmin is not allowed to execute '/bin/vi /etc/pki/tls/openssl.cnf' as rootI’m trying to follow this article about troubleshooting

FbigVisitor II

FortiGate HA with One Licensed and One Unlicensed Unit

Hello,I have two FortiGate 1800F units running FortiOS 7.4.12. One unit is licensed, while the other is currently unlicensed. I am planning to purchase the required license for the second unit, but it may take some time.For the time being, I need to

msrinivasanStaff

Customer Service Tip: How to handle the error: 'The entered credentials are not correct'

Description This article explains how to resolve the error on the FortiCloud Portal: 'The entered credentials are not correct – see [FAQ Link] for help'. Scope SSO, FortiCloud Portal. Solution When the below error appears on the FortiCloud Po

Remote Access VPN using DSL Modem Public IP

Hi All , Am using the following network and wanted to implement Remote Access VPN over Fortinet60F using public IP available on Wifi DSL modem. What would be the preferred method to deploy Firewall Transparent or routed mode. as per my knowledge am

181

19 hours ago

joostringootExplorer

Some valid emails in log tagged "Accept; Defer disposition" appear to never arrive in the destination mailbox, what can be done?

Would it be possible to get more info logged on the reason why the disposition was deferred? is ther a setting in the configuration that regulates this? Can a whitelisted sender also be “blocked” like this? Would whitelisting of the domain or sender

412

agomesStaff

Technical Tip: How to configure SD-WAN ADVPN 2.0 with iBGP on loopbacks (Hub-and-Spoke, 3 sites)

DescriptionThis article describes how to deploy a scalable SD-WAN topology with ADVPN 2.0 dial-up tunnels, iBGP peering on loopback interfaces, automatic spoke-to-spoke shortcuts, and per-overlay SD-WAN health checks. The design uses one Hub acting a

5131

Technical Tip: Dealing with a Windows BSOD Event

Luke_FTNTStaff

FortiEDR

Description This article describes how to deal with a Windows BSOD event. Scope FortiEDR Solution In some cases, a Windows endpoint may suffer from a Windows 'blue screen of death' (BSOD) event when an Endpoint Detection and Response or EPP s

40721

P

22 hours ago

DerekWSmallExplorer II

Bizarre behavior with FortiClient on Vmware workstation

This is a head scratcher…..I am a network infrastructure professional services engineer. I support a few dozen customers, many of which use Fortinet products. I run VMware workstation on my laptop, and have a different VM dedicated to each of my cu

100

A

adilkhan7546New Member

FortiGate GUI Logs Out Immediately After Successful Login in EVE-NG

DDoS Custom Policy

Issue: my domain xyz.com is build on next js when webiste is loaded xyz.com/_next/static urls are loaded which loads multiple js files , waf ddos policy has threshold 50 req. and multiple js files are when loaded waf suspects it as DDOS attack.... no

Imran782New Member

Hello Fortinet Community,I have installed FortiGate-VM64 FortiOS 8.0.0 in my EVE-NG lab environment.The FortiGate VM boots normally, and I am able to access the GUI login page.Current IssueI can successfully enter my credentials and the GUI appears t

151

2 hours ago

OsamaFattohExplorer II

FortiSOAR community

FortiSOAR root account

Hello everyone,I’m trying to run sudo commands using the csadmin user, but I’m getting the following error:Sorry, user csadmin is not allowed to execute '/bin/vi /etc/pki/tls/openssl.cnf' as rootI’m trying to follow this article about troubleshooting

Remote Access VPN using DSL Modem Public IP

Hi All , Am using the following network and wanted to implement Remote Access VPN over Fortinet60F using public IP available on Wifi DSL modem. What would be the preferred method to deploy Firewall Transparent or routed mode. as per my knowledge am

181

19 hours ago

joostringootExplorer

Some valid emails in log tagged "Accept; Defer disposition" appear to never arrive in the destination mailbox, what can be done?

Would it be possible to get more info logged on the reason why the disposition was deferred? is ther a setting in the configuration that regulates this? Can a whitelisted sender also be “blocked” like this? Would whitelisting of the domain or sender

412

DerekWSmallExplorer II

Bizarre behavior with FortiClient on Vmware workstation

This is a head scratcher…..I am a network infrastructure professional services engineer. I support a few dozen customers, many of which use Fortinet products. I run VMware workstation on my laptop, and have a different VM dedicated to each of my cu

100

Sinichi_KudoExplorer

FortiGate DHCP - 'Removed Due to Conflict' Issue

We are experiencing an issue with our FortiGate DHCP server where IP addresses are repeatedly marked as "Removed due to conflict."We have already performed the following checks:Verified that there are no DHCP reservations or static mappings for the a

DustinTSNew Member

Hi Team, could you please help clarify this for me?I just want to make sure whether FortiMail is included in the UTP bundle. If not, how can I use or activate it?Thank you and hope to hearing back from you.

241

FortiEng_345Explorer III

Install FortiClient Installer from EMS Cloud to Windows PCs automatically without need to enter Invitation code

Hi everyone,Is it possible to register the FortiClient to EMS Cloud without needing the invitation code. We have more than 300 PCs to install the client and we dont want to enter the invitation to each of them. Bests,FortiEng

1042

MG4Explorer III

FortiEndpoint EMS Cloud – FortiEDR installation fails on Windows 11

Hi,I would like to know if anyone else is experiencing similar issues with FortiEndpoint EMS Cloud and the integrated FortiEDR feature.Our environment is currently running:FortiClient EMS Cloud: 7.4.7 build 2194 (Mature) FortiClient: 7.4.7 Windows 11

592

Customer Service Tip: How to handle the error: 'The entered credentials are not correct'

msrinivasanStaff

Customer Service

Description This article explains how to resolve the error on the FortiCloud Portal: 'The entered credentials are not correct – see [FAQ Link] for help'. Scope SSO, FortiCloud Portal. Solution When the below error appears on the FortiCloud Po

agomesStaff

Technical Tip: How to configure SD-WAN ADVPN 2.0 with iBGP on loopbacks (Hub-and-Spoke, 3 sites)

DescriptionThis article describes how to deploy a scalable SD-WAN topology with ADVPN 2.0 dial-up tunnels, iBGP peering on loopback interfaces, automatic spoke-to-spoke shortcuts, and per-overlay SD-WAN health checks. The design uses one Hub acting a

5131

Technical Tip: Dealing with a Windows BSOD Event

Luke_FTNTStaff

FortiEDR

Description This article describes how to deal with a Windows BSOD event. Scope FortiEDR Solution In some cases, a Windows endpoint may suffer from a Windows 'blue screen of death' (BSOD) event when an Endpoint Detection and Response or EPP s

nsoniStaff

Troubleshooting Tip: PH_REPORT_SQLITE3_PROFILE_NOT_FOUND errors due to invalid baseline profile IDs defined in rules

DescriptionThis article describes how to identify and resolve recurring PH_REPORT_SQLITE3_PROFILE_NOT_FOUND errors caused by rules referencing invalid baseline profile IDs.ScopeFortiSIEM.SolutionSymptoms:The following error is repeatedly logged in /o

130

Troubleshooting Tip: Managed FortiSwitches go to offline state on the FortiGate due to NTP Daemon consuming high levels of CPU on FortiSwitch

sachitdas_FTNTStaff

FortiSwitch

DescriptionThis article describes an issue where managed FortiSwitches show offline on the FortiGate because the NTPD process consumes high levels of CPU on the FortiSwitch.ScopeManaged FortiSwitch versions 7.6.6, 7.4.9, and earlier versions.Solution

860

JkauralStaff

Troubleshooting Tip: Threat ID 131072 seen in logs when firewall policy has disclaimer enabled for TCP port 1433

DescriptionThis article explains why Threat ID 131072 may be displayed in FortiGate traffic logs when traffic matches an otherwise allowed firewall policy with Disclaimer enabled.The behavior can be observed when the traffic is destined for TCP port

900

Troubleshooting Tip: Resolving VDOM copy error due to untagged VLAN configuration

manasacStaff

FortiManager

DescriptionThis article describes how to resolve the VDOM copy/install error that occurs when a switch template's VLAN references a VLAN object that is already in use by a different FortiLink interface. This issue can occur when installing configurat

920

hlnganStaff

Troubleshooting Tip: Error 'Manual license upload failed' when uploading license to the Off-network (air-gapped) FortiGate

DescriptionThis article describes a known issue when applying the Off-network (air-gapped) license to the FortiGate which does not have internet access. An error 'Manual license upload failed' will be received.ScopeFortiGate.SolutionWhen trying uploa

1380

candawiStaff

Troubleshooting Tip: Disk is showing as the only log location

DescriptionThis article describes seeing only Disk as the only log location in logs such as System events or Security events when the firewall has no disk.ScopeFortiGate.SolutionTo check if the firewall has a disk, run the command below:get system st

980

tino_pStaff

Technical Tip: Traffic from switch go to switch interface instead of underlying vlan interface

DescriptionThis article describes the behavior of traffic from the switch go to switch interface instead of underlying vlan interface, caused the intermittent connection between the client and serverScopeFortiSwitch, FortiGate.SolutionIn this setup,

220