Welcome to the Fortinet Community!

Integrated Darktrace Syslog with FortiAnalyzer.

Source IP for cert probe

Hi FGT adminsFortiOS 7.4.12. All HTTPS sited are blocked with error: “SSL connection is blocked due to unable to retrieve server's certificate”.In the latest FOS updates the FGT probes the certificate itself (self generated traffic) before allowing o

TsukzNew Member

I have integrated Darktrace Syslog with FortiAnalyzer. When Darktrace sends logs in JSON format, the log messages are truncated in FortiAnalyzer. However, when I configure Darktrace to send logs in CEF format, the Message field in FortiAnalyzer is em

121

2 hours ago

akanibekStaff

Technical Tip: FortiGate IPsec dial-up IKEv2 SAML-based authentication with FortiAuthenticator as IdP

Description This article describes how to configure an IPSec IKEv2 SAML-based authentication, with a FortiAuthenticator acting as an IdP. The article describes the FortiGate settings, rather than the FortiAuthenticator. Scope FortiAuthenticator

156541

4 hours ago

riteshpvStaff

FortiSwitch

Technical Tip: FortiSwitch Offline with Event old_state 13

DescriptionThis article describes one of the reasons why a FortiSwitch may go offline and generate the event old_state 13.ScopeFortiSwitch, FortiGate.SolutionOne of the conditions that causes a FortiSwitch to reconnect to the FortiLink interface is a

AnjuVisitor II

FortiWLC 4200 WLC 500D External Captive Portal with Aruba ClearPass - RADIUS authentication succeeds but controller shows Authentication Failed

Hi everyone,I'm trying to integrate FortiWLC 8.6-5 build-8 (FortiWLC-500D) with Aruba ClearPass Guest (ClearPass Policy Manager 6.12.7.308288 on C3010 platform) as an external captive portal.Current setupFortiWLC 8.6-5 build-8 External captive portal

443

6 hours ago

DanieleS99Explorer

Connection reset with FPAM web launching sessions

Hi,I recently implemented FPAM and I have a strange behavior with all the web launching sessions.The FPAM is in a subnet dedicated.My pc is on another subnet and the internal services and external(obviously) are on other subnets.In the middle there’s

985

Troubleshooting Tip: Consideration of SSH filter on SUSE server

tbaruaStaff

FortiPAM

DescriptionThis article describes how to resolve issues caused by an incompatible shell prompt format when using an SSH filter profile in FortiPAM with a SUSE server.ScopeFortiPAM, SUSE server.SolutionThe issue arises due to the shell prompt format o

271

yksoonNew Member

Fortinet Due Care Due Diligence (Fake promise)

Hi All Community member and expert. Do want to request whether you guys encounter or experience issue as below: Incident that when request change of FortiSASE POP, the Fortinet engineer change without validating the settings (Which require deletion o

120

mgoswamiStaff

Troubleshooting Tip: Configuration deployment fails to ADOM after the FortiGate upgrade

DescriptionThis article describes an issue where configuration installation from FortiManager to an ADOM fails after upgrading a FortiGate from FortiOS v7.4.11 to FortiOS v7.6.6.During the installation process, the Install Preview or Install Progress

280

FortiAppSec Cloud Protection Against CVE-2026-49975 (HTTP/2 "Bomb") DoS

hwenStaff

Blogs

[delete post]

100

23 minutes ago

AEKSuperUser

Integrated Darktrace Syslog with FortiAnalyzer.

Source IP for cert probe

Hi FGT adminsFortiOS 7.4.12. All HTTPS sited are blocked with error: “SSL connection is blocked due to unable to retrieve server's certificate”.In the latest FOS updates the FGT probes the certificate itself (self generated traffic) before allowing o

TsukzNew Member

I have integrated Darktrace Syslog with FortiAnalyzer. When Darktrace sends logs in JSON format, the log messages are truncated in FortiAnalyzer. However, when I configure Darktrace to send logs in CEF format, the Message field in FortiAnalyzer is em

AnjuVisitor II

FortiWLC 4200 WLC 500D External Captive Portal with Aruba ClearPass - RADIUS authentication succeeds but controller shows Authentication Failed

Hi everyone,I'm trying to integrate FortiWLC 8.6-5 build-8 (FortiWLC-500D) with Aruba ClearPass Guest (ClearPass Policy Manager 6.12.7.308288 on C3010 platform) as an external captive portal.Current setupFortiWLC 8.6-5 build-8 External captive portal

443

6 hours ago

DanieleS99Explorer

Connection reset with FPAM web launching sessions

Hi,I recently implemented FPAM and I have a strange behavior with all the web launching sessions.The FPAM is in a subnet dedicated.My pc is on another subnet and the internal services and external(obviously) are on other subnets.In the middle there’s

985

yksoonNew Member

Fortinet Due Care Due Diligence (Fake promise)

Hi All Community member and expert. Do want to request whether you guys encounter or experience issue as below: Incident that when request change of FortiSASE POP, the Fortinet engineer change without validating the settings (Which require deletion o

120

Jirka1Explorer II

FortiOS 7.6.7 – Significant increase in daily log volume sent to FortiAnalyzer without configuration changes

Hi,after upgrading our FortiGate HA cluster from 7.4.12 to 7.6.7, we noticed a significant increase in the daily log volume sent to FortiAnalyzer.Environment:FortiGate: 2x FG-200F in HAFortiOS: 7.6.7FortiAnalyzer: VM, currently 8.0.0Logging: FortiAna

793

TutekNew Member

Fortimail cannot change default admin account

Hi,I’m trying to change default admin account, but after rename command in the cli I have error:fml (admin) # rename admin to admin_disabledCommand failed(-37). Error string:Is not possible to change this account on fortimail?

242

kyle-hsuanExplorer

FMG manage FAZ, no have log view on FMG

Hi FAZ、FMG created same ADOM name for manage FAZfollow this guidehttps://docs.fortinet.com/document/fortimanager/7.4.0/examples/289359/adding-fortianalyzer-to-fortimanager at FAZ, ADOM name ”ADOM_v74” have one device at FMG, have same ADOM name”ADO

150

pekomsNew Member

why is FNAC so consistently inconsistent?

I've been experiencing a wide array of issues with FNAC lately.I won't get into them all, but one that is really irking me is when I browse to the FNAC home page via HTTPS, I login successfully, I click on any navigation item (i.e Inventory) and then

382

akanibekStaff

Technical Tip: FortiGate IPsec dial-up IKEv2 SAML-based authentication with FortiAuthenticator as IdP

Description This article describes how to configure an IPSec IKEv2 SAML-based authentication, with a FortiAuthenticator acting as an IdP. The article describes the FortiGate settings, rather than the FortiAuthenticator. Scope FortiAuthenticator

156541

4 hours ago

riteshpvStaff

FortiSwitch

Technical Tip: FortiSwitch Offline with Event old_state 13

DescriptionThis article describes one of the reasons why a FortiSwitch may go offline and generate the event old_state 13.ScopeFortiSwitch, FortiGate.SolutionOne of the conditions that causes a FortiSwitch to reconnect to the FortiLink interface is a

40

4 hours ago

tbaruaStaff

FortiPAM

Troubleshooting Tip: Consideration of SSH filter on SUSE server

DescriptionThis article describes how to resolve issues caused by an incompatible shell prompt format when using an SSH filter profile in FortiPAM with a SUSE server.ScopeFortiPAM, SUSE server.SolutionThe issue arises due to the shell prompt format o

271

mgoswamiStaff

Troubleshooting Tip: Configuration deployment fails to ADOM after the FortiGate upgrade

DescriptionThis article describes an issue where configuration installation from FortiManager to an ADOM fails after upgrading a FortiGate from FortiOS v7.4.11 to FortiOS v7.6.6.During the installation process, the Install Preview or Install Progress

280

Technical Tip: Understanding FortiSwitchNMS Options

palsStaff

FortiSwitch

DescriptionThis article describes the device-specific options available in FortiSwitchNMS.ScopeFortiSwitchNMS.FortiSwitch.SolutionFortiSwitchNMS is an on-premises centralized management solution for standalone FortiSwitch and FortiSwitch-AX deploymen

60

11 hours ago

tyangStaff

FortiNAC-F

Technical Tip: Preparing information before contacting Fortinet Support for FortiNAC

DescriptionThis article describes the information to collect before opening a FortiNAC Technical Assistance Center (TAC) support case. Providing complete environment details, logs, packet captures, and reproduction steps helps TAC begin the investiga

70

11 hours ago

HarveyRebeloStaff

FortiEDR

Troubleshooting Tip: FortiEDR collector degradation

DescriptionThis article describes a situation where FortiEDR Collectors become degraded and are unable to receive configuration updates from the FortiEDR Manager.ScopeFortiEDR.SolutionFollow these steps:Move affected collectors to a different group;

60

11 hours ago

jo_rangStaff