Welcome to the Fortinet Community!

FortiNAC Ipphone

The port switch connected to the ipphone and if i plug endpoint to the port of the ipphone then the port switch is shutdown even there are no port security in the port switch. Anyone know why?I can see the log from the switch Jul 20 14:30:13: %AUTHMG

323

20 minutes ago

Epitaph91New Member

Domain was blocked by dns botnet C&C

Is anyone else seeing a large amount of “Domain was blocked by DNS botnet C&C” alerts for valid URLS?the commonality is that its akamai and the common 5 IP addresses are the following.23.223.209.3223.33.44.22823.44.201.23423.57.90.6823.33.40.7

30

1 hour ago

HS08Visitor III

Fortinac Device Profiling

I have device profiling rule to move all ipphone to IPPhone group. Test the rule manually for one ipphone and the rule is matches, but why the IPPhone group not have any member?

neЯ0Visitor II

FortiOS 7.6.7 IKEv2/IPsec VPN stopped working after upgrade

Hello.First, I apologize for my imperfect English. Recently, I started learning about networking using FortiGate.When running FortiOS v7.6.6, I configured IKEv2/IPsec VPN on a FortiGate 60F.At that time, the VPN connection worked correctly.However, a

Roberto_CVisitor III

Repeated drop in risk score on FortiSiem.

Repeated drop in risk score on FortiSiem.FortiSIEM version: 7.5.1.0620Installation type: Supervisor + WorkersThe drop began around July 11 (the FortiSIEM Risk Score rapidly fell to 0 over approximately three days; incidents continue to be generated n

AdrianMOPNew Member

Issues with FortiClient (EMS Version) on macOS

Dear Community,I am writing you all because in my Company we have massive Issues with FortiClient (EMS) on the macOS Clients. I am working as IT Administrator and I am responsible for the MacBook’s.The problem:On the Mac Devices we have since many mo

tkannegantiStaff

Technical Tip: Configure FortiManager as local FDN server for FortiFirewall to get license validated (VM license, Device level license FMWR, AV, IPS etc.)

DescriptionThis article discusses whether the FortiFirewall can download the VM and Device licenses information from FortiManager acting as FortiGuard server, and how to identify the request and response on FortiManager to check the communication.Sco

50

foxzkExplorer II

False Positive: Microsoft Power Automate Desktop files (PAD.JavaBridge.jar) flagged by FortiClient

Hello Fortinet Team,I would like to report a False Positive occurring in FortiClient. The antivirus engine is flagging and quarantining legitimate .jar files that belong to Microsoft Power Automate Desktop.These files are required by the Microsoft ap

152

FortiSIEM Active-Active HA deployment failed

gauravpawarExplorer III

FortiSIEM

Hello Team,We need some guidance regarding a FortiSIEM Active-Active HA deployment. Version 7.4.2Current EnvironmentWe currently have 1 Supervisor node running in production. Our plan is to add 2 additional Supervisor nodes to build an Active-Active

593

pawelsExplorer

How to download FortiAnalyzer clickhouse schema file

Where I can find click house schema file for FortiAnalyzer ?According to docs.fortinet.com:Each log table stored in an SQL database contains log fields that can be used in datasets.You can view a full list of the fields available for each log type in

HS08Visitor III

The port switch connected to the ipphone and if i plug endpoint to the port of the ipphone then the port switch is shutdown even there are no port security in the port switch. Anyone know why?I can see the log from the switch Jul 20 14:30:13: %AUTHMG

323

20 minutes ago

Epitaph91New Member

Domain was blocked by dns botnet C&C

Is anyone else seeing a large amount of “Domain was blocked by DNS botnet C&C” alerts for valid URLS?the commonality is that its akamai and the common 5 IP addresses are the following.23.223.209.3223.33.44.22823.44.201.23423.57.90.6823.33.40.7

30

1 hour ago

HS08Visitor III

Fortinac Device Profiling

I have device profiling rule to move all ipphone to IPPhone group. Test the rule manually for one ipphone and the rule is matches, but why the IPPhone group not have any member?

Roberto_CVisitor III

Repeated drop in risk score on FortiSiem.

Repeated drop in risk score on FortiSiem.FortiSIEM version: 7.5.1.0620Installation type: Supervisor + WorkersThe drop began around July 11 (the FortiSIEM Risk Score rapidly fell to 0 over approximately three days; incidents continue to be generated n

AdrianMOPNew Member

Issues with FortiClient (EMS Version) on macOS

Dear Community,I am writing you all because in my Company we have massive Issues with FortiClient (EMS) on the macOS Clients. I am working as IT Administrator and I am responsible for the MacBook’s.The problem:On the Mac Devices we have since many mo

foxzkExplorer II

False Positive: Microsoft Power Automate Desktop files (PAD.JavaBridge.jar) flagged by FortiClient

Hello Fortinet Team,I would like to report a False Positive occurring in FortiClient. The antivirus engine is flagging and quarantining legitimate .jar files that belong to Microsoft Power Automate Desktop.These files are required by the Microsoft ap

152

FortiSIEM Active-Active HA deployment failed

gauravpawarExplorer III

FortiSIEM

Hello Team,We need some guidance regarding a FortiSIEM Active-Active HA deployment. Version 7.4.2Current EnvironmentWe currently have 1 Supervisor node running in production. Our plan is to add 2 additional Supervisor nodes to build an Active-Active

593

pawelsExplorer

How to download FortiAnalyzer clickhouse schema file

Where I can find click house schema file for FortiAnalyzer ?According to docs.fortinet.com:Each log table stored in an SQL database contains log fields that can be used in datasets.You can view a full list of the fields available for each log type in

ariefpb_New Member

Duplicate Endpoint in EMS (Azure AD Synced) After Clean Reinstall

Hello everyone,I am running into an issue regarding a duplicate device in EMS , and I am unable to delete the stale record because of the Azure AD sync lock.Environment: FortiClient Version: 7.2.12 OS: Windows 11 Enterprise EMS Integration: Synce

yksoonNew Member

How to reach support if hotline no one pickup?

Hi All Community expert, Good day, looking for some insight that how do you guys reach Fortinet support?Background: FortiSASE have POP related issue while trying call Fortinet supportChallenges:Try to reach support through existing email but no one r

141

5 hours ago

tkannegantiStaff

FortiManager

Technical Tip: Configure FortiManager as local FDN server for FortiFirewall to get license validated (VM license, Device level license FMWR, AV, IPS etc.)

DescriptionThis article discusses whether the FortiFirewall can download the VM and Device licenses information from FortiManager acting as FortiGuard server, and how to identify the request and response on FortiManager to check the communication.Sco

50

Outbreak Alert: Joomla SP Page Builder RCE

ssrushtiStaff

FortiRecon

FortiRecon Digital Risk Protection (DRP), a SaaS-based service, includes External Attack Surface Management, Brand Protection, and Adversary Centric Intelligence.Adversary Centric Intelligence (ACI): leverages FortiGuard Threat Analysis to provide co

40

4 hours ago

epinheiroStaff

Technical Tip: FortiOS RIP and RIPnG resource list

DescriptionThis article provides a centralized list of published KB articles related to RIP versions 1 and 2 for IPv4 and RIPnG (IPv6).ScopeFortiGate, RIP.SolutionTitle and linksDescriptionTechnical Tip: Configure RIP routing protocol in FortiGatePro

90

4 hours ago

jfelix09Staff

Troubleshooting Tip: FortiGate HA Cluster Fails to Synchronize after firmware upgrade to FortiOS v7.6.7 and v8.0.0

DescriptionThis article describes the issue of a FortiGate High Availability (HA) cluster failing to synchronize after a firmware upgrade to FortiOS v7.6.7 or v8.0.0. The user may encounter an out-of-sync error message for 'user.krb-keytab', indicati

180

4 hours ago

Jackie_TStaff & Editor

FortiPAM

Technical Tip: FortiPAM password changer for FortiOS v7.6.3 and above

DescriptionThis article describes the new password changer needed to work with FortiOS v7.6.3 and above.ScopeFortiPAM.SolutionIn FortiOS v7.6.3 and above, there is a change in the CLI syntax when changing the password. Hence, the FortiPAM default pas

50

7 hours ago

ssteoStaff

Troubleshooting Tip: FortiGate High Availability out-of-sync due to different passwd-time

DescriptionThis article describes a situation where a FortiGate High Availability (HA) cluster is out-of-sync due to different passwd-time settings for local users. The article provides a step-by-step guide to resolve the issue by unsetting the passw

240

8 hours ago

chall_FTNTStaff

FortiAnalyzer

Technical Tip: Different methods for migrating logs between FortiAnalyzer units

DescriptionThis article describes the different methods that can be used to migrate logs between FortiAnalyzer units. The benefits and requirements of each method are compared. This article can be useful in several scenarios, including hardware repla

80

9 hours ago

Matt_BStaff & Editor

Technical Tip: Migrating from FortiGate permanent VM license to subscription license

Description This article describes two methods to migrate an existing FortiGate VM from a permanent VM license to a subscription license, and provides some considerations to evaluate when planning the migration. Scope FortiGate VM, BYOL subscrip

14131

1 day ago

Adolfo_Z_HStaff

FortiAP

Troubleshooting Tip: How to debug RADIUS protocol on the FortiAP CLI

DescriptionThis article describes how to debug the RADIUS protocol on the FortiAP CLI.ScopeFortiAP when managed by FortiEdge Cloud service or deployed with local standalone and local authentication.SolutionWhen FortiAPs are deployed on the FortiEdge

1371

2 days ago

vprabhu_FTNTStaff