Welcome to the Fortinet Community!

FortiMail: Recipient verification exception?

Hello FortiPeople, I’m checking if there’s a possibility to create a “recipient verification” exception for a particular source IP address. Let me explain:We have a particular client application, which sends e-mails to multiple addresses in one SMTP

00

1 minute ago

EhanssenStaff

Technical Tip: Maximum web proxy user limit used up by wad-source-affinity

DescriptionThis article describes Web proxy user limitations when a WAD source affinity is used.ScopeAll FortiGate versions since v7.0.SolutionWhen this limitation is reached, the block page shows 'The maximum web proxy user limit has been reached'.B

20

16 minutes ago

peterk2020Visitor III

Using Fortigate as a DNS server for users.

Here is what I want to achieve with using Fortigate as a DNS server for all remote locations.For internal users, using Fortigate interface IP as a DNS server. Fortigate will forward any public domain name queries to system DNS servers while any inte

Raju_kNew Member

FortiMail best practices with a Bulk email service provider?

Hey everyone,We’re reviewing our outbound mail flow with FortiMail and wanted to ask if anyone here is using a Bulk email service provider alongside Fortinet infrastructure for newsletters or transactional email delivery.I’ve been testing a few servi

Forti_USBNew Member

FortiGate 60F USB connection to LapTop does not work

HiWhen the USB Type A cable is connected to the Fortigate 60F USB Mng input and the other side of the USB cable Type C is connected to the LapTop then no connection takes place. Note the cable is a USB Data cable Type A to Type C. Is a UDB Driver req

422

50 minutes ago

canoasVisitor III

MAC flapping Arista and Fortigate Mgmt interface

I have configured the following in a new Active-Passive setupUnit A (setup as Active 120 HA) - mgmt IP address 10.1.1.5/24 (set management ip and dedicated-management)Unit B (setup as Passive 115 HA) - Mgmt IP address 10.1.1.6/24(set management ip an

402

1 hour ago

FortiGatorVisitor III

AD Groups in and EMS policies

Hello all, I am looking for some assistance regarding using AD groups in EMS policies. My scenario is as follows: I have created a security group for people allowed to use dropbox and configured the web filter and application filter appropriately. I

271

3 hours ago

mbasExplorer II

It is not possible to delete rogue devices from the FortiNAC database if there are too many

Hi all, I am installing FortiNAC in a large environment and I added the Aruba WLC to FortiNAC without any issues. 3 days later, FortiNAC performed L2 pooling and discovered over 400,000 rogue hosts. After that, I disabled L2 pooling for the WLC, whic

661

Technical Tip: FortiWeb RADIUS login issue with FortiAuthenticator

Ahmed_GalalStaff

FortiWeb

DescriptionThis article describes a technical issue where the FortiWeb device does not show the token window after entering the username and password when using RADIUS authentication with a FortiAuthenticator. The user is unable to log in due to the

70

Technical Tip: How to reject an email and send a copy to BCC recipient

alyaStaff

FortiMail

DescriptionThis article describes how to configure FortiMail to reject an email while simultaneously sending a copy of the message to a BCC recipient for monitoring or auditing purposes.ScopeFortiMail.SolutionIn some environments, administrators may

40

TiboNew Member

FortiMail: Recipient verification exception?

Hello FortiPeople, I’m checking if there’s a possibility to create a “recipient verification” exception for a particular source IP address. Let me explain:We have a particular client application, which sends e-mails to multiple addresses in one SMTP

00

1 minute ago

peterk2020Visitor III

Using Fortigate as a DNS server for users.

Here is what I want to achieve with using Fortigate as a DNS server for all remote locations.For internal users, using Fortigate interface IP as a DNS server. Fortigate will forward any public domain name queries to system DNS servers while any inte

Raju_kNew Member

FortiMail best practices with a Bulk email service provider?

Hey everyone,We’re reviewing our outbound mail flow with FortiMail and wanted to ask if anyone here is using a Bulk email service provider alongside Fortinet infrastructure for newsletters or transactional email delivery.I’ve been testing a few servi

Forti_USBNew Member

FortiGate 60F USB connection to LapTop does not work

HiWhen the USB Type A cable is connected to the Fortigate 60F USB Mng input and the other side of the USB cable Type C is connected to the LapTop then no connection takes place. Note the cable is a USB Data cable Type A to Type C. Is a UDB Driver req

422

50 minutes ago

canoasVisitor III

MAC flapping Arista and Fortigate Mgmt interface

I have configured the following in a new Active-Passive setupUnit A (setup as Active 120 HA) - mgmt IP address 10.1.1.5/24 (set management ip and dedicated-management)Unit B (setup as Passive 115 HA) - Mgmt IP address 10.1.1.6/24(set management ip an

402

1 hour ago

FortiGatorVisitor III

AD Groups in and EMS policies

Hello all, I am looking for some assistance regarding using AD groups in EMS policies. My scenario is as follows: I have created a security group for people allowed to use dropbox and configured the web filter and application filter appropriately. I

271

3 hours ago

mbasExplorer II

It is not possible to delete rogue devices from the FortiNAC database if there are too many

Hi all, I am installing FortiNAC in a large environment and I added the Aruba WLC to FortiNAC without any issues. 3 days later, FortiNAC performed L2 pooling and discovered over 400,000 rogue hosts. After that, I disabled L2 pooling for the WLC, whic

steven4Visitor III

Agentless ZTNA Troubleshooting

Hello there, if anyone has experience with implementing agentless ZTNA, I would really appreciate your help if you look at this issue and help me with that. i am trying but it is not working somehow. It is also very appreciated if you can offer consu

Ali7hNew Member

Questions Regarding Flow-Based Antivirus Processing and Architecture

Hi ,I would like to ask for some clarification regarding Flow-Based Antivirus behavior and architecture on FortiGate.I reviewed the Administration Guide and several technical documents, but I could not find detailed explanations for some internal Flo

160

6 hours ago

LoganWolfPackNew Member

OS 7.4.12 update broke my IPSec VPN..not happy

I had automatic updates turned on on my fortigate 60F. After Installation of OS 7.4.12 none of my VPN-Clients were able to login anymore. No idea why. Reverting to 7.4.11 resolved the problem. Does anyone have an idea what exactly caused the problem?

1225

8 hours ago

EhanssenStaff

Technical Tip: Maximum web proxy user limit used up by wad-source-affinity

DescriptionThis article describes Web proxy user limitations when a WAD source affinity is used.ScopeAll FortiGate versions since v7.0.SolutionWhen this limitation is reached, the block page shows 'The maximum web proxy user limit has been reached'.B

20

16 minutes ago

Ahmed_GalalStaff

FortiWeb

Technical Tip: FortiWeb RADIUS login issue with FortiAuthenticator

DescriptionThis article describes a technical issue where the FortiWeb device does not show the token window after entering the username and password when using RADIUS authentication with a FortiAuthenticator. The user is unable to log in due to the

70

Technical Tip: How to reject an email and send a copy to BCC recipient

alyaStaff

FortiMail

DescriptionThis article describes how to configure FortiMail to reject an email while simultaneously sending a copy of the message to a BCC recipient for monitoring or auditing purposes.ScopeFortiMail.SolutionIn some environments, administrators may

40

Troubleshooting Tip: Importing users from LDAP server by group membership shows stale user accounts info

lkumarStaff

FortiAuthenticator

DescriptionThis article describes the steps to troubleshoot stale user account information during user import from LDAP to FortiAuthenticator. The user is experiencing slow performance when importing users from LDAP, and the changes made in the LDAP

80

5 hours ago

tino_pStaff

Technical Tip: IPS archive logging is not working after upgrading to FortiOS firmware v7.6.6

DescriptionThis article describes how the IPS archive logging stopped working after upgrading to FortiOS firmware v7.6.6.ScopeFortiOS v7.6.6.SolutionAfter upgrading to FortiOS v7.6.6, IPS archive logging did not work anymore. Indeed, the Archive colu

180

6 hours ago

Oscar_WeeStaff

Troubleshooting Tip: Unable to use the CLI console widget directly within the FortiGate GUI with Edge Browser

DescriptionThis article describes how to resolve the issue of being unable to use the CLI console widget directly within the FortiGate GUI with Edge Browser.ScopeFortiGate.SolutionWhen using Chrome or Firefox Browsers, users can use the CLI console w

120

6 hours ago

WelingtonMatiasStaff

Technical Tip: StrongSwan IKEv2 VPN on Ubuntu with Certificate Authentication via FortiGate

DescriptionThis article describes the complete installation and configuration of the StrongSwan IPsec IKEv2 VPN client on Ubuntu 22.04 LTS, authenticated against a FortiGate firewall using mutual public key (pubkey) authentication. Certificates are i

170

FortiGuard Outbreak Alert: Iran-linked Cyber Attacks

kcheungStaff

FortiNDRCloud

DescriptionFortiGuard Labs has published a report on the ongoing Iran-linked cyber operations.Initial access is often obtained by attackers exploiting known weaknesses in systems that remain unpatched or inadequately secured.The following vulnerabili

60

Technical Tip: How to configure application exclusions for vulnerability compliance tags

adriellousadaStaff

FortiClient

DescriptionThis procedure details how to exclude vulnerabilities detected on the endpoint for Security Posture TAGs detection.Scope FortiClient EMS.SolutionTo exclude certain applications from the Security Posture Tags check, access EMS, and edit the

80

Technical Tip: How to check cluster clock update for High Availability

kwcheng__FTNTStaff

FortiAuthenticator

DescriptionThis article describes how to check cluster clock update for High Availability (HA) in FortiAuthenticator.Scope FortiAuthenticator.SolutionAccurate time synchronization ensures that logs from different nodes in an HA cluster are consistent

50