Welcome to the Fortinet Community!

Replacing a FortiGate 3700D with a FortiGate 900G?

Replacing a FortiGate 3700D with a FortiGate 900G?Management has proposed replacing the current 3700D model edge firewall with a 900G unit. The 3700D is capable of handling a throughput of approximately 17 Gbps.

344

Technical Tip: TACACS session duration

bkarlStaff

FortiAuthenticator

DescriptionThis article describes the duration of TACACS sessions and how to manage them during testing. The user may need to modify the session duration to apply changes to authorization profiles quickly.ScopeFortiAuthenticator.SolutionTo manage TAC

50

salassilvajExplorer III

vpn ssl subinterface stop working but internet is reachable

vpn ssl stop working but internet is reachable,my topology is a sdwan connection to internet from two wan sub interfaces joined as sdwan members into a sdwan-zone, we are using the fortigate lower models and firmware are 7.4.0 and 7.2.4, internet con

411

chall_FTNTStaff

Technical Tip: Using fetch requests to migrate logs

DescriptionThis article describes how to use Fetch Requests to Migrate Logs between 2 FortiAnalyzer units.This could be used to run reports on another FortiAnalyzer based upon archive logs. Or as a potentially more selective method of migrating logs

60

chall_FTNTStaff

Technical Tip: Using log aggregation to migrate logs

DescriptionThis article describes how to use Log Aggregation to Migrate Logs to another (possibly new) FortiAnalyzer, providing an example and some tips for troubleshooting.This is the recommended approach for migrating logs when both old and new For

30

Solutions79New Member

FGT-50E with FAP 221E on 6.0.x, to be migrated to a FGT-50G

Hello dear community, I got a new customer that has an unlicensed FortiGate 50E and FortiAPs 221E on firmware 6.0.x. They want to replace the FortiGate with the 50G model but want to keep the APs for now. The target FortiOS for 50G would be 7.4.12. A

825

6 hours ago

Grey GrinNew Member

Adding MFA to OpenVPN users authenticated through Active Directory

Hi,We're reviewing our VPN authentication setup and would like to add MFA for remote users.At the moment, OpenVPN authenticates users against our on-premises Active Directory. Because some parts of our environment don't have reliable Internet access,

142

E

6 hours ago

MandalorianExplorer III

Querying the same remote LDAP servers via FortiGate and FortiAuthenticator (FAC)

Hi everyone,On my FortiGate running v7.4.9, I have a specific VDOM configured for one of my clients.Currently, this VDOM is integrated with a FortiAuthenticator (FAC), which in turn queries two remote LDAP servers to handle MFA for client VPNs. I now

582

9 hours ago

FFTNew Member

FortiSIEM

Fortisiem integration with reporting tool

Can Fortisiem be integrated with PowerBI for reporting? if yes, how? or which reporting tool can be integrated with Fortisiem?

10343

B

12 hours ago

ByteHavenExplorer III

FortiNAC-F Compatibility with Aruba, TP-Link, Sophos, and UniFi Devices

Hello everyone,Can anyone confirm whether FortiNAC-F fully supports (or has been successfully integrated) with the following:Aruba 1930 switches TP-Link TL-SG1016PE switches Sophos AP55C access points UniFi U6 Mesh Pro access pointsSpecifically, I’m

811

12 hours ago

ceva156New Member

Replacing a FortiGate 3700D with a FortiGate 900G?

Replacing a FortiGate 3700D with a FortiGate 900G?Management has proposed replacing the current 3700D model edge firewall with a 900G unit. The 3700D is capable of handling a throughput of approximately 17 Gbps.

344

salassilvajExplorer III

vpn ssl subinterface stop working but internet is reachable

vpn ssl stop working but internet is reachable,my topology is a sdwan connection to internet from two wan sub interfaces joined as sdwan members into a sdwan-zone, we are using the fortigate lower models and firmware are 7.4.0 and 7.2.4, internet con

411

Grey GrinNew Member

Adding MFA to OpenVPN users authenticated through Active Directory

Hi,We're reviewing our VPN authentication setup and would like to add MFA for remote users.At the moment, OpenVPN authenticates users against our on-premises Active Directory. Because some parts of our environment don't have reliable Internet access,

142

E

6 hours ago

MandalorianExplorer III

Querying the same remote LDAP servers via FortiGate and FortiAuthenticator (FAC)

Hi everyone,On my FortiGate running v7.4.9, I have a specific VDOM configured for one of my clients.Currently, this VDOM is integrated with a FortiAuthenticator (FAC), which in turn queries two remote LDAP servers to handle MFA for client VPNs. I now

582

9 hours ago

FFTNew Member

FortiSIEM

Fortisiem integration with reporting tool

Can Fortisiem be integrated with PowerBI for reporting? if yes, how? or which reporting tool can be integrated with Fortisiem?

bettyzhangStaff

FortiCNAPP: Detecting Cloud Threats with Graph Neural Networks

Modern Cloud Threats Need More ContextModern cloud environments generate a constant stream of activity: users sign in, services call other services, automation creates and updates resources, and workloads shift across accounts and regions. Hidden ins

320

14 hours ago

jdoyonVisitor III

VPN Phase 2 stops working after Azure FortiGate-VM Live Migration

Hello, Trying to understand what happened and how to prevent it in the future: - Running FortiGate-VM in an Azure VM.- This FG has a custom site-to-site IPSec tunnel to on-prem. This effectively connects the virtual data centre to the on-pr

431813

17 hours ago

khunsuNew Member

Extreme CPU Usage IPSMonitor

Hey since Last Sunday we have been using 700G in a HA Cluster in our Environment.I do Not have a single Policy using IPS but the CPU Spikes extremly high because of this. After a restart using "Diagnose Test application ipsmonitor 99" the CPU goes do

NetRyszardNew Member

FortiGate 7.6.7: blank page on loading GUI after upgrade

I've noticed an extremely strange thing upon upgrading some test FortiGates to the new version 7.6.7: the upgrade goes fine, and the FortiGate is happily online and is routing/firewalling-just fine. However, when trying to load the GUI it is just a b

5356

17 hours ago

networkmExplorer

FortiPAM Failed login via SSMS

Hi, We have FortiPAM. We have our users who use SqlServer Mgmt Studio for connecting to database and they using windows integrated authentication. External users have also account and they connect the same while they are logged on some domain PCs. Bu

865

18 hours ago

bkarlStaff

FortiAuthenticator

Technical Tip: TACACS session duration

DescriptionThis article describes the duration of TACACS sessions and how to manage them during testing. The user may need to modify the session duration to apply changes to authorization profiles quickly.ScopeFortiAuthenticator.SolutionTo manage TAC

50

chall_FTNTStaff

Technical Tip: Using fetch requests to migrate logs

DescriptionThis article describes how to use Fetch Requests to Migrate Logs between 2 FortiAnalyzer units.This could be used to run reports on another FortiAnalyzer based upon archive logs. Or as a potentially more selective method of migrating logs

60

chall_FTNTStaff

Technical Tip: Using log aggregation to migrate logs

DescriptionThis article describes how to use Log Aggregation to Migrate Logs to another (possibly new) FortiAnalyzer, providing an example and some tips for troubleshooting.This is the recommended approach for migrating logs when both old and new For

30

Troubleshooting Tip: How to fix code snippet action failure

jhimanshuStaff

FortiSOAR

DescriptionThis article describes the steps to overcome failures for the code snippet connector action due to the following error:'This connector restricts certain modules: cPickle, ctypes, glob, http, imp, importlib, inspect, io, marshal, multiproce

110

18 hours ago

gpelusoStaff

Technical Tip: How to verify if a high CPU usage is caused by the IPS engine process

Description This article describes how to troubleshoot high CPU usage caused by the IPS process. Scope All FortiOS. Solution On systems where a high CPU load is suspected to be caused by IPS-based scanning, the IPS engines can be set to 'bypa

okhatabStaff

Technical Tip: Blocking clients that are not compliant with RFC 9155

DescriptionThis article describes how to make FortiADC stop TLS handshakes with clients that are sending MD5 or SHA-1 in the signature_algorithms extension in the TLS handshake as per the RFC 9155 requirements.SolutionFortiADC version 8.0.3 and above

120

21 hours ago

jiyongStaff

FortiGate Cloud

Technical Tip: The 'Traffic Trends' chart in the 'Summary' report is incorrect

DescriptionThis article describes an issue where the Traffic Trend section is displayed incorrectly when generating a Summary Report in FortiGate Cloud.ScopeFortiGate Cloud v26.2.0.SolutionThe Summary Report generated by the scheduler only shows the

150

22 hours ago

jiyongStaff

Troubleshooting Tip: Unexpected DPD added on the FGCP secondary after creating a tunnel on the primary unit

DescriptionThis article describes an issue where adding an IPsec tunnel on the FGCP (Active-Passive) primary unit causes the DPD to be added to a tunnel on the secondary unit where DPD was not configured.ScopeFortiOS v7.x.SolutionThis issue occurs wh

390

22 hours ago

MaritStaff

Technical Tip: Collecting FortiGate diagnostic output using non-interactive SSH

DescriptionThis article describes how to collect FortiGate diagnostic output using non-interactive SSH.ScopeFortiGate.SolutionWhen there is a requirement to collect a large number of FortiGate sessions (for example, more than 500,000 sessions), retri

290

23 hours ago

Hassan97wshStaff