Welcome to the Fortinet Community!

Technical Tip: Migrate SAML authentication from SSL VPN to dial-up IPsec IKEv2 while keeping SSL VPN in service

DescriptionThis article describes how to add SAML authentication to a dial-up IPsec IKEv2 remote-access VPN on a FortiGate that already runs SSL VPN with SAML, without modifying or interrupting the existing SSL VPN service.ScopeFortiOS v7.2, v7.4, v7

12444

B

9 minutes ago

cromerofustesStaff

published in FortiClient

Configure SNMP monitoring for FortiClient EMS

DescriptionFortiClient EMS supports SNMP polling and traps for remote monitoring. Use SNMP polling to query system metrics such as CPU usage, network bandwidth, and disk usage.ScopeFortiClient EMS 7.4.5, build 2111.SolutionRun the commands below at t

40

11 minutes ago

JordAngeStaff

published in FortiVoice

Business contacts caller ID not displayed on FortiVoice

DescriptionAn issue where incoming calls from configured business contacts display only the phone number instead of the contact name.ScopeFortiVoice.SolutionSymptomsWhen a call is received from a number configured in the business contacts, the phone

00

14 minutes ago

Enable Captive Portal debugging on the client side to simplify troubleshooting

Hawada1Staff & Editor

published in FortiNAC-F

DescriptionHow to enable captive portal debugging on the client side to simplify the troubleshooting process.ScopeFortiNAC-FSolutionTo simplify troubleshooting and make sure you have full visibility of endpoint browser communication with FortiNAC dur

50

20 minutes ago

Juancacst

False positive anti-replay (replayed packet) drops on NP7 platforms when npu-offload is enabled on phase1-interface

DescriptionAnti-replay (replayed packet) drops are seen on NP7 platforms at or around rekeys when npu-offload is enabled on phase1-interface.ScopeFortiOS, NP7 platforms.SolutionOn NP7-based FortiGates such as FortiGate-401F, inbound ESP packets consi

20

26 minutes ago

F

finnbalor9New Member

FortiManager

In FortiManager, how do you create a single shared policy package that contains firewall policies only gets installed on a particular device? For example, I want firewall policy 1 only gets installed on device 1 and firewall policy 2 only gets instal

212

55 minutes ago

T

TsukzmanExplorer

FortiNAC 7.6.7 – Different Guest Self-Registration VLANs for HQ and FlexConnect Site on Cisco C9800

Hello everyone,I need assistance with configuring FortiNAC guest self-registration to assign different VLANs based on the location of the Cisco access point.Environment:FortiNAC: Version 7.6.7, deployed at HQ. Cisco WLC: Catalyst C9800 running versio

653

Backing up the full FortiSwitch configuration to an SFTP/FTP/TFTP server

dwivedisStaff

published in FortiSwitch

DescriptionThe methods available to back up the complete FortiSwitch configuration to an external file server.ScopeFortiSwitch.SolutionWhen performing a full configuration backup, the configuration file is transferred from the FortiSwitch to an exter

20

lmfvdeskNew Member

Kernel Boot Trap between Forticlient and Dell Pro 3 14260

Hello,I’m creating this Topic because I’m facing an issue that neither me, Dell or our Forticlient provider faced before and we both have no idea what exactly is going on. We ordered a batch of Dell Computer Pro 3 14260. Those computers are facing ke

91023

F

finnbalor9New Member

FortiManager

In FortiManager, how do you create a single shared policy package that contains firewall policies only gets installed on a particular device? For example, I want firewall policy 1 only gets installed on device 1 and firewall policy 2 only gets instal

212

55 minutes ago

T

TsukzmanExplorer

FortiNAC 7.6.7 – Different Guest Self-Registration VLANs for HQ and FlexConnect Site on Cisco C9800

Hello everyone,I need assistance with configuring FortiNAC guest self-registration to assign different VLANs based on the location of the Cisco access point.Environment:FortiNAC: Version 7.6.7, deployed at HQ. Cisco WLC: Catalyst C9800 running versio

653

lmfvdeskNew Member

Kernel Boot Trap between Forticlient and Dell Pro 3 14260

Hello,I’m creating this Topic because I’m facing an issue that neither me, Dell or our Forticlient provider faced before and we both have no idea what exactly is going on. We ordered a batch of Dell Computer Pro 3 14260. Those computers are facing ke

91023

A

AdrianMOPNew Member

Issues with FortiClient 7.4.8 for macOS

Dear Community, since the upgrade to FortiClient 7.4.8 we have the following problem: For example some User’s use Miro Boards (miro.com). The page works normally but when you open any Miro Board it just loads infinite. When checking the Console it sa

2153

A

S

shuaibNew Member

How can we register Fortinet devices under our client's Fortinet Support Portal account instead of our Partner Portal.

How can we register Fortinet devices under our client's Fortinet Support Portal account instead of our Partner Portal? Could you please share the registration procedure and required documentation?

222

FranFisc1Explorer

SNMP polling individual cluster member using the management-ip ?

We have two Fortigate 40F running FortiOS 7.6.8 in A/P HAno dedicated management interface. no ha-direct.Requirement is to poll individual cluster membersusing authenticated and encrypted SNMPv3.Polling cluster IP works.Now I used the “management-ip”

486

P

pritunlenjoyer208New Member

Upgrade VPN-Only to 7.4.8

Per https://www.fortiguard.com/psirt/FG-IR-26-165 we’re supposed to upgrade FortiClient.exe to 7.4.8, but the download links at https://links.fortinet.com/forticlient/win/vpnagent are only for 7.4.7 or lower. What gives? How are we supposed to remedi

801

R

Rodrigo Arevalo

Public Servers With FQDN - Fortiweb

Hello Everyone , I Hope Youre WellWe have several web services and APIs that are exposed via an FQDN (Fully Qualified Domain Name) rather than a pool of source server IP addresses. Could you help me understand how to configure a service in FortiWeb t

241

T

Tarek GalalNew Member

Question: Recommended Version for FortiEMS and FortiClient

Dear Team, Could you please advise how we can identify the recommended releases for FortiEMS and FortiClient? Similar to FortiOS, FortiManager, and FortiAnalyzer, where Fortinet provides documentation specifying the recommended releases according to

331

J

jeanncarlos06New Member

Suspect False Positive Get-NetView.psm1 FSA/RISK_HIGH

Hello, team!Today we identified an FSA/RISK_HIGH detection involving Windows PowerShell files, specifically the Get-NetView.psm1 module.We are investigating this issue across three different customers, each with their own independent FortiClient EMS

1372

FortiAP clients unable to obtain IP address via DHCP

laltuzarStaff

published in FortiAP

DescriptionWireless clients cannot receive an IP address from the DHCP server despite the server sending DHCP Offer packets. This is caused by insufficient Power over Ethernet (PoE) amperage provided to the FortiAP.ScopeFortiAP, FortiGate, FortiSwitc

10

5 minutes ago

amalskyStaff

Technical Tip: Migrate SAML authentication from SSL VPN to dial-up IPsec IKEv2 while keeping SSL VPN in service

DescriptionThis article describes how to add SAML authentication to a dial-up IPsec IKEv2 remote-access VPN on a FortiGate that already runs SSL VPN with SAML, without modifying or interrupting the existing SSL VPN service.ScopeFortiOS v7.2, v7.4, v7

12444

B

9 minutes ago

cromerofustesStaff

published in FortiClient

Configure SNMP monitoring for FortiClient EMS

DescriptionFortiClient EMS supports SNMP polling and traps for remote monitoring. Use SNMP polling to query system metrics such as CPU usage, network bandwidth, and disk usage.ScopeFortiClient EMS 7.4.5, build 2111.SolutionRun the commands below at t

40

11 minutes ago

JordAngeStaff

published in FortiVoice

Business contacts caller ID not displayed on FortiVoice

DescriptionAn issue where incoming calls from configured business contacts display only the phone number instead of the contact name.ScopeFortiVoice.SolutionSymptomsWhen a call is received from a number configured in the business contacts, the phone

00

14 minutes ago

Enable Captive Portal debugging on the client side to simplify troubleshooting

Hawada1Staff & Editor

published in FortiNAC-F

DescriptionHow to enable captive portal debugging on the client side to simplify the troubleshooting process.ScopeFortiNAC-FSolutionTo simplify troubleshooting and make sure you have full visibility of endpoint browser communication with FortiNAC dur

50

20 minutes ago

Juancacst

False positive anti-replay (replayed packet) drops on NP7 platforms when npu-offload is enabled on phase1-interface

DescriptionAnti-replay (replayed packet) drops are seen on NP7 platforms at or around rekeys when npu-offload is enabled on phase1-interface.ScopeFortiOS, NP7 platforms.SolutionOn NP7-based FortiGates such as FortiGate-401F, inbound ESP packets consi

20

26 minutes ago

dwivedisStaff

published in FortiSwitch

Backing up the full FortiSwitch configuration to an SFTP/FTP/TFTP server

DescriptionThe methods available to back up the complete FortiSwitch configuration to an external file server.ScopeFortiSwitch.SolutionWhen performing a full configuration backup, the configuration file is transferred from the FortiSwitch to an exter

20

Quint021Staff

IKEv2 Remote Access dialup connections failures with FortiGate in FIPS with EAP enabled due to EVP_DigestInit_ex failed

DescriptionThis article describes the error observed when attempting to connect to an IPsec VPN (remote access) with EAP enabled on a device with FIPS mode enabled.ScopeFortiGate.SolutionWhen attempting to establish an IPsec VPN connection using IKEv

80

Clickhouse export of Events table (full backup)

vraevStaff

published in FortiSIEM

DescriptionThis article describes how to make a full backup of the 'events' table in ClickHouse.ScopeFortiSIEM.SolutionThe file that will be created will be in the current working directory (use 'pwd' to check the current one).Depending on the size o

70

published in FortiManager

akaratasStaff

How to solve “unset tag-uuid” issue while installing config

DescriptionHow to solve the “unset tag-uuid” issue while installing config to FortiGate from FortiManager.ScopeFortiManager.SolutionsTo solve the issue, the policy package should be reimported from FortiGate to FortiManager with the following steps.

690