Welcome to the Fortinet Community!

MS-ISAC Threat STIX/TAXII Threat Feeds

I was curious if anyone was already ingesting the Malicious IP and/or Domain Lists from their MS-ISAC membership? Someone asked in another community thread if those were included in the Fortigate threat feeds somewhere, but didn't get a response. I

01

4 minutes ago

B

B-WVisitor III

OSPF still forming adjacency over VDOM link when one VDOM is disabled?

Hi,I’m facing a behavior that seems counter‑intuitive regarding OSPF over inter‑VDOM links. I am in a multi‑VDOM setup:OSPF is configured between VDOMs over a VDOM link Each VDOM has its own routing instance (OSPF process) According to documentation:

AlexTopNew Member

Single FortiGuard license for FortiGate A-P HA cluster that are already registered

Hi I want to have 1 single FortiGuard license for my 2x100F FortiGate.You have the doc if the devices are not yet registered, but i want to do this with already registerd device is this possible?FYI Doc, how to do if the devices are not registered.ht

211

chandrestNew Member

Roll back changes with Fortigates in HA managed by FortiManager

Questions, we have Fortigates in HA managed by FortiManager.If we make changes in FortiManager and install, what is the correct way to roll back changes from the FortiManager?If we make changes in FortiManager but didn't install, what is the correct

213

bassem1Explorer

EMS email alerts reports not opening

Hello,I’m facing an issue with EMS endpoint alert emails. The email includes a report link for full details, but when I open it, I get the following message:“Redirect Notice – The page you were on is trying to send you to an invalid URL.”Has anyone f

191

mohamed44Visitor III

Content File Extraction Timeout

Hello Dears,I’m trying to extract content from file using the built-in connector and putting the attachment IRI to the step {{vars.input.records[0].file['@id']}} but it timeout with the following error:do you have any idea for the reason of this ?Tha

40

Troubleshooting Tip: Switch ports not visible in network inventory

shahzebStaff

FortiNAC-F

DescriptionThis article describes a solution to the issue where FortiNAC does not show the ports of recently added switches. In these cases, the port tab stays blank under Network -> Inventory.ScopeFortiNAC-F v7.4.4, 7.4.5, 7.4.6SolutionOpen the F

pd_ukNew Member

EMS-Managed FortiClient Sends EAP NAK on IKEv2 EAP-SAML IPsec VPN — Non-EMS Client Works

ENVIRONMENTFortiOS: 7.6.x (FortiGate 120G)FortiClient EMS: 7.4.x (FortiCloud SaaS)FortiClient: 7.4.7 (Windows)Authentication: IKEv2 EAP-SAML via Microsoft Entra ID---ISSUEFortiClient endpoints managed by EMS fail to complete IKEv2 IPsec VPN tunnel es

ning83New Member

Unable to update FortiClient app on a Surface Pro device

Hi I’ve been using the FortiClient app for many years on my personal Surface Pro 7 device. Not had any issues, but recently we’ve taken part in a vulnerability audit and the app is flagging a few issues. The solution is to update, but I’m struggling

NitSiNew Member

Hi- I am trying to take config backup using CLI and facing errors. Pings, Trace, Sniffer all are giving outputs FTP - Getting bellow errorConnect to ftp server <FTP server IP>Please wait...Send config file to ftp server via vdom root failed.Com

TTUOpsNew Member

MS-ISAC Threat STIX/TAXII Threat Feeds

I was curious if anyone was already ingesting the Malicious IP and/or Domain Lists from their MS-ISAC membership? Someone asked in another community thread if those were included in the Fortigate threat feeds somewhere, but didn't get a response. I

B-WVisitor III

OSPF still forming adjacency over VDOM link when one VDOM is disabled?

Hi,I’m facing a behavior that seems counter‑intuitive regarding OSPF over inter‑VDOM links. I am in a multi‑VDOM setup:OSPF is configured between VDOMs over a VDOM link Each VDOM has its own routing instance (OSPF process) According to documentation:

AlexTopNew Member

Single FortiGuard license for FortiGate A-P HA cluster that are already registered

Hi I want to have 1 single FortiGuard license for my 2x100F FortiGate.You have the doc if the devices are not yet registered, but i want to do this with already registerd device is this possible?FYI Doc, how to do if the devices are not registered.ht

211

chandrestNew Member

Roll back changes with Fortigates in HA managed by FortiManager

Questions, we have Fortigates in HA managed by FortiManager.If we make changes in FortiManager and install, what is the correct way to roll back changes from the FortiManager?If we make changes in FortiManager but didn't install, what is the correct

213

bassem1Explorer

EMS email alerts reports not opening

Hello,I’m facing an issue with EMS endpoint alert emails. The email includes a report link for full details, but when I open it, I get the following message:“Redirect Notice – The page you were on is trying to send you to an invalid URL.”Has anyone f

191

mohamed44Visitor III

Content File Extraction Timeout

Hello Dears,I’m trying to extract content from file using the built-in connector and putting the attachment IRI to the step {{vars.input.records[0].file['@id']}} but it timeout with the following error:do you have any idea for the reason of this ?Tha

pd_ukNew Member

EMS-Managed FortiClient Sends EAP NAK on IKEv2 EAP-SAML IPsec VPN — Non-EMS Client Works

ENVIRONMENTFortiOS: 7.6.x (FortiGate 120G)FortiClient EMS: 7.4.x (FortiCloud SaaS)FortiClient: 7.4.7 (Windows)Authentication: IKEv2 EAP-SAML via Microsoft Entra ID---ISSUEFortiClient endpoints managed by EMS fail to complete IKEv2 IPsec VPN tunnel es

NitSiNew Member

Hi- I am trying to take config backup using CLI and facing errors. Pings, Trace, Sniffer all are giving outputs FTP - Getting bellow errorConnect to ftp server <FTP server IP>Please wait...Send config file to ftp server via vdom root failed.Com

R00k13-NSNew Member

Migrating FAZ Appliances

Hello,I have a 300E chassis, and we are going to migrate it to an 810G chassis.We need to replicate the 300E configuration on the new FAZ chassis. Do we need to update the 810G’s firmware to the same version as the 300E?Do we need to create the same

233

Potato168Explorer

How to know the reason why a tag was assigned/unaissgned to a EMS client?

Hi all, I am using Forticlient EMS cloud with Fortigate to achieve ZTNA. We have some endpoints tag changed for some reason, and we wanna know the reason to resolve the issue. But seems the Fortinet log only told that tag was assigned/unaissgned to a

434

Troubleshooting Tip: Switch ports not visible in network inventory

shahzebStaff

FortiNAC-F

DescriptionThis article describes a solution to the issue where FortiNAC does not show the ports of recently added switches. In these cases, the port tab stays blank under Network -> Inventory.ScopeFortiNAC-F v7.4.4, 7.4.5, 7.4.6SolutionOpen the F

60

Technical Guide: Understanding FortiManager core operations and device database status / policy package status with examples

Rudresh_VeerappajiStaff

FortiManager

DescriptionThis article describes the FortiManager core operations that include configuration management using device database and policy package databases, and understanding the workflows that enable these core operations is crucial to ensure the de

110

Troubleshooting Tip: FortiDDOS is generating event logs with incorrect time

Ahmed_GalalStaff

FortiDDoS

DescriptionThis article describes how to fix FortiDDos generating event logs with incorrect time.ScopeFortiDDos-F.SolutionIn some cases, FortDDos-F generates the event log with an incorrect time while the attack logs are being generated with the corr

30

4 hours ago

Ylli_SeitajStaff

Technical Tip: How to allow iCloud private relay

Description This article describes how to configure the FortiGate Firewall to allow iCloud Private Relay. Scope FortiGate. Solution Go to: 'Policy & Objects' -> 'Firewall Policy' and select 'Create new' to create a new Firewall Policy.

122321

4 hours ago

aebadiStaff

FortiSIEM

Technical Tip: Node.js-charting down after successful upgrade due to hostname mismatch

DescriptionThis article describes how to troubleshoot and recover the Node.js-charting process after a FortiSIEM upgrade when the upgrade completes successfully but the Node.js-charting service remains down.Scope FortiSIEM v7.x.SolutionDuring a Forti

90

4 hours ago

SivaSStaff

Technical Tip: Neighbor Reachability Timer uses default value for 10 minutes after reboot

DescriptionThis article describes the temporary behaviour following a system reboot, where the system uses a default 30-second neighbor reachable timer for the first 10 minutes before applying the configured reachable-time setting.ScopeFortiOS.Soluti

90

5 hours ago

Ylli_SeitajStaff

Troubleshooting Tip: Issue with mobile FortiToken assigned in FortiGate HA cluster.

DescriptionThis article describes an issue related to the assignment of mobile FortiTokens when the license is mapped on one FortiGate, but the primary is the other FortiGate.ScopeFortiOS v7.2.13, v7.4.9.SolutionFor example, the mobile FortiTokens li

300

10 hours ago

meslamiStaff

FortiWeb

Technical Tip: Traffic analysis/latency report on FortiWeb in true transparent proxy mode

DescriptionThis article describes and analyzes the difference in throughput and BW utilization on ingress and egress interfaces on a FortiWeb, deployed in true transparent proxy mode. The observation is that the throughput/utilization on the egress i

100

10 hours ago

pjangStaff & Editor