Welcome to the Fortinet Community!

Fortigate 7.6.7

I upgrade our fortigate to v7.6.7 and after upgraded then the web admin gui if use mgmt ip address can’t be accessed from advpn, only can be accessed from local site and from hub only. If i using lan ip (not mgmt) then i can access. Anyone know why?S

2965

yeowkm99New Member

Issues after upgrading to 7.4.12M

We encountered some issues accessing some URLs after upgrading from 7.2.12M to 7.4.12M using FGT401E on HA.applications like MS Teams get disconnected suddenly and users reported that access to some external portal become very laggy.upon checking the

483

sriinuvasExplorer II

Migrate SSL-VPN to IPSec_FortiOS upgrade from 7.4 to 7.6 or 8.0

Hi Everyone,We have a fortigate firewall with HA and FortiOS is 7.4. also laid few client based FortiGate SSL-VPNs accounts.Now we have to upgrade either 7.6 or 8.0, where as not support the client based FortiGate SSL-VPNs accounts. So, what is the b

152

ChrisWarneNew Member

FortiManager Threat Weight Template

Our internal tools use FMG API to manage it and we were looking to create a Threat Weight Template using API.I have checked:https://fndn.fortinet.net/index.php?/documents/file/521-fortimanager-76-json-api-full-reference/https://how-to-fortimanager-ap

191

7 hours ago

HS08Explorer

Can we tweek this captive portal page in FortiWLC 4200 WLC 500D

Fnac License consumption

My Fnac license 106 is in use, how we can know detail which endpoint is consume the license?

AnjuExplorer

can we get a proper captive portal instead of showing the default page.https://<controller-ip>/vpn/auth_web_ok.htmlwe tried changing the auth_web_ok.html inside custom captive portal under maintenance. but still its loading the default fortinet

181

8 hours ago

R

renata.sheltonNew Member

Technical Tip: Safe HA Separation for Fortigate 6K - Prod Traffic Full Cutover - Fortigate 6000 series

This is the safest and fastest way that I have found to break HA of an Active-Passive production traffic pair of Fortigate 6K firewalls - Fortigate 6000 Series firewalls, while keeping massive production traffic flowing.The precaution and FPC configu

prash001New Member

Moved from SSL vpn (radius) to IPSecV2 (SAML) - Could I do better

Hi, we were an on-prem only company. Earlier this year we went hybrid with 365.For VPN earlier we had our clients connecting through forticlient with AD credentials leveraging RADIUS. No MFA.We then configured a parallel setup using IPSec ike v2 and

melehoi46New Member

FortiGate 601E v7.4.12 - Email-based SSL VPN Two-Factor Authentication generates OTP event but never sends SMTP traffic

Fortinet TAC has also reviewed the case and confirmed that they cannot see any SMTP traffic leaving the FortiGate.At this point, it appears that the email notification process is never invoked even though authentication reaches the "Token is needed"

HS08Explorer

Fortinac DHCP Fingerprint

When we use DHCP fingerprint for device profiling then we need to add ip helper on L3 interface. How if the L3 using fortigate, there is no ip helper command?

HS08Explorer

I upgrade our fortigate to v7.6.7 and after upgraded then the web admin gui if use mgmt ip address can’t be accessed from advpn, only can be accessed from local site and from hub only. If i using lan ip (not mgmt) then i can access. Anyone know why?S

2965

yeowkm99New Member

Issues after upgrading to 7.4.12M

We encountered some issues accessing some URLs after upgrading from 7.2.12M to 7.4.12M using FGT401E on HA.applications like MS Teams get disconnected suddenly and users reported that access to some external portal become very laggy.upon checking the

483

sriinuvasExplorer II

Migrate SSL-VPN to IPSec_FortiOS upgrade from 7.4 to 7.6 or 8.0

Hi Everyone,We have a fortigate firewall with HA and FortiOS is 7.4. also laid few client based FortiGate SSL-VPNs accounts.Now we have to upgrade either 7.6 or 8.0, where as not support the client based FortiGate SSL-VPNs accounts. So, what is the b

152

HS08Explorer

Can we tweek this captive portal page in FortiWLC 4200 WLC 500D

Fnac License consumption

My Fnac license 106 is in use, how we can know detail which endpoint is consume the license?

AnjuExplorer

can we get a proper captive portal instead of showing the default page.https://<controller-ip>/vpn/auth_web_ok.htmlwe tried changing the auth_web_ok.html inside custom captive portal under maintenance. but still its loading the default fortinet

181

8 hours ago

R

renata.sheltonNew Member

Technical Tip: Safe HA Separation for Fortigate 6K - Prod Traffic Full Cutover - Fortigate 6000 series

This is the safest and fastest way that I have found to break HA of an Active-Passive production traffic pair of Fortigate 6K firewalls - Fortigate 6000 Series firewalls, while keeping massive production traffic flowing.The precaution and FPC configu

prash001New Member

Moved from SSL vpn (radius) to IPSecV2 (SAML) - Could I do better

Hi, we were an on-prem only company. Earlier this year we went hybrid with 365.For VPN earlier we had our clients connecting through forticlient with AD credentials leveraging RADIUS. No MFA.We then configured a parallel setup using IPSec ike v2 and

melehoi46New Member

FortiGate 601E v7.4.12 - Email-based SSL VPN Two-Factor Authentication generates OTP event but never sends SMTP traffic

Fortinet TAC has also reviewed the case and confirmed that they cannot see any SMTP traffic leaving the FortiGate.At this point, it appears that the email notification process is never invoked even though authentication reaches the "Token is needed"

100

M

13 hours ago

Sharique62Visitor III

Creating a Layer 2 VLAN 700 Bridge on FortiGate 200F Between Two FortiSwitches

I would like to understand whether the following design is possible and, if so, how it can be configured on a FortiGate 200F or 600F.Current Topology:FortiSwitch 124F ── FLINK_INET_1 ────┐

60

16 hours ago

Sharique62Visitor III

LAN failover is not occurring between the FortiGate HA pair and the Cisco Switches operating in VSS

 Can anyone help me with the issue where LAN failover is not occurring between the FortiGate HA pair and the Cisco VSS switches?[ Cisco VSS Logical Switch ](Switch 01 + Switch 02)/ \[Po101] [Po101]/ \ / \(Eth1/3) (Eth2/3) (Eth1/4) (Eth2/4)| | |

2123

16 hours ago

esalijaStaff

FortiGate

Troubleshooting Tip: After v7.4.6, the FortiToken Mobile Activation emails have the same sender and receiver

Description This article describes an issue where, after FortiOS v7.4.6, users who use their email addresses for activation of the FortiToken Mobile receive the same email address as both the sender and receiver. Scope FortiGate. Solution

arleniscgStaff

Technical Tip: How to Troubleshoot FortiDDoS-B boot loop issue

DescriptionThis article describes how to troubleshoot a FortiDDoS-B boot loop and provides a step-by-step guide to resolve it.ScopeFortiDDoS-B.SolutionConnect via serial console:Verify whether the system is completing the boot process or continuously

140

Technical Tip: How to identify the event ID that triggered collector isolation mode

arleniscgStaff

FortiEDR

DescriptionThis article describes how to identify the Event ID that caused a FortiEDR Collector to be placed into Isolation Mode.ScopeFortiEDR.SolutionThere are two methods:Option 1: Search the Incidents page.Use the Incidents page in combination wit

150

Technical Tip: How to export and build a network topology diagram in MS Visio for FortiSwitches that are being managed by FortiGate or FortiSwitch Manager

agodboleStaff

FortiSwitch

DescriptionThis article describes how to export and build a network topology diagram in MS Visio for FortiSwitches managed by FortiGate or FortiSwitch Manager.Scope FortiSwitches managed by FortiGate or a FortiSwitch Manager.SolutionFor large-scale e

270

Technical Tip: Using BGP local-AS configuration to replace a private ASN in the AS_PATH of IPv6 locally originated routes

akileshcStaff

FortiGate

DescriptionThis article describes how to prevent a private ASN from being advertised in the IPv6 BGP AS_PATH when FortiGate advertises locally originated routes to an external BGP neighbor.ScopeFortiGate.SolutionThe AS_PATH manipulation behavior diff

460

Outbreak Alert: Microsoft SharePoint Zero-day Attack

smallickStaff

FortiRecon

FortiRecon Digital Risk Protection (DRP), a SaaS-based service, includes External Attack Surface Management, Brand Protection, and Adversary Centric Intelligence. Adversary Centric Intelligence (ACI): leverages FortiGuard Threat Analysis to provi

SAJUDIYAStaff

Technical Tip: SSL VPN error 'wrong vdom (0:0) or time expired.'

Description This article describes an error, 'Unable to establish VPN connection. The VPN server may be unreachable (-6005)' at 40% in FortiClient.   However, the error 'wrong vdom (0:0) or time expired' appears in SSL VPN debug. Scope F

gsharmaStaff

Technical Tip: Application is not shown to the IAM user

DescriptionThis article describes the troubleshooting steps needed to take when the application is not showing expected to the IAM users.ScopeFortiAppSec Cloud.SolutionWhen an IAM user logs in to the FortiAppSec portal, there can be an issue where ap

140

Troubleshooting Tip: How to troubleshoot unable to add FortiNDR sensor to FortiNDR center with error message 'failed to register new center'

cysawStaff & Editor

FortiNDR (on-premise)

DescriptionThis article describes how to troubleshoot unable to add FortiNDR sensor to the FortiNDR center with error message 'failed to register new center'.ScopeFortiNDR.SolutionIf the error message 'failed to register new center' appears when addi

80

Troubleshooting Tip: Getting error message 'Error resizing disk partition' in FortiClient EMS in AWS environment

btanStaff & Editor

FortiClient

DescriptionThis article describes how to resolve the issue 'Error resizing disk partition' in FortiClient EMS in an AWS environment.ScopeFortiClient EMS v7.4 onwards in an AWS environment.SolutionWhen FortiClient EMS is deployed in an AWS environment

180