Welcome to the Fortinet Community!

Blocking by the Tailscale application on Fortigate

Fortigate can block the Tailscale application with policy and application control; it will block both inbound Tailscale sessions and outbound Tailscale sessions. Is it possible to block only inbound Tailscale sessions, and still allow outbound Tailsc

120

C

3 hours ago

HS08Visitor III

Forinac sometime not send CoA

If the endpoint was idle for some time then when i change the group on the NAC, I can see the fortinac not send the CoA to the switch.We can see here the last fnac send the CoA is 14:02:18 then i change the group for that host at 14:30 and there is n

411

4 hours ago

HS08Visitor III

Fnac Vlan Change Inventory

When i move endpoint to another host role the on the policy the endpoint should get a new vlan (37) but why in the inventory the endpoint still use old vlan (32) and i must wait up to 3 minutes then the vlan is changed?

80

AEKSuperUser

Source IP for cert probe

Hi FGT adminsFortiOS 7.4.12. All HTTPS sited are blocked with error: “SSL connection is blocked due to unable to retrieve server's certificate”.In the latest FOS updates the FGT probes the certificate itself (self generated traffic) before allowing o

252

osoleimaniStaff

Technical Tip: Deploying and verifying a FortiGate VM running FortiOS v8.0 on VMware Workstation Pro

DescriptionThis article describes how to deploy and verify a FortiGate VM running FortiOS v8.0 on VMware Workstation Pro. The procedure covers importing the FortiGate VM deployment package (.OVF), selecting a storage location, completing the VMware W

1461

7 hours ago

A

Anonymous_UserContributor III

Customer Service

Technical Tip: Fortinet stencils for use in diagrams - VSS SVG PNG

Description   This article describes that Fortinet provides a selection of Visio stencils in the form of a VSS file for use in diagrams as well as SVG PNG.   Scope   Fortinet drawings, icons, and presentations.   Solution The offi

5673831

J

8 hours ago

MarkusKoehlerNew Member

Windows updates fails with enabled Forticlient

Since last week we experiencing a lot of problems with Windows updates (mostly Windows 11, but there was one Windows 10 among them as well), specifically KB5040442. On about 10% of our Windows clients the update would start and go until 96% and stay

Anonymous_UserContributor III

Technical Tip: FortiGate IPsec VPN resource list

Description   This article describes how Virtual Private Network (VPN) technology enables users to connect to private networks securely.   RFC 6071 describes IPsec (Internet Protocol Security) as a suite of protocols that provides secu

429023

nathan_hStaff & Editor

Troubleshooting Tip: 'SSL VPN Proxy Error. Reason: Access Denied'

Description   This article describes how to resolve the error 'SSL VPN Proxy Error. Reason: Access Denied'.   Scope   FortiGate v7.x.x.   Solution   The user sees an error 'SSL VPN Proxy Error. Reason: Access Denied' when acc

157191

F

FabrichoundNew Member

FortiAP "Connected Via" on GUI issue

Hi allI have noticed a weird issue, client had a power outage over the weekend as the redid the server room UPS.Now my AP’s show “Connected VIA” my VOIP interface on the FortiGate, even tough they are connected via FortiSwitches and the LLDP Neighbor

csmgrNew Member

Blocking by the Tailscale application on Fortigate

Fortigate can block the Tailscale application with policy and application control; it will block both inbound Tailscale sessions and outbound Tailscale sessions. Is it possible to block only inbound Tailscale sessions, and still allow outbound Tailsc

HS08Visitor III

Forinac sometime not send CoA

If the endpoint was idle for some time then when i change the group on the NAC, I can see the fortinac not send the CoA to the switch.We can see here the last fnac send the CoA is 14:02:18 then i change the group for that host at 14:30 and there is n

411

4 hours ago

HS08Visitor III

Fnac Vlan Change Inventory

When i move endpoint to another host role the on the policy the endpoint should get a new vlan (37) but why in the inventory the endpoint still use old vlan (32) and i must wait up to 3 minutes then the vlan is changed?

80

AEKSuperUser

Source IP for cert probe

Hi FGT adminsFortiOS 7.4.12. All HTTPS sited are blocked with error: “SSL connection is blocked due to unable to retrieve server's certificate”.In the latest FOS updates the FGT probes the certificate itself (self generated traffic) before allowing o

252

MarkusKoehlerNew Member

Windows updates fails with enabled Forticlient

Since last week we experiencing a lot of problems with Windows updates (mostly Windows 11, but there was one Windows 10 among them as well), specifically KB5040442. On about 10% of our Windows clients the update would start and go until 96% and stay

FabrichoundNew Member

FortiAP "Connected Via" on GUI issue

Hi allI have noticed a weird issue, client had a power outage over the weekend as the redid the server room UPS.Now my AP’s show “Connected VIA” my VOIP interface on the FortiGate, even tough they are connected via FortiSwitches and the LLDP Neighbor

choilVisitor III

Windows Update fails and performance degradation when FortiClient Sandbox profile is enabled EMS

Hello community, We are currently running Forti EMS Cloud 7.4.3 with several endpoint versions, mainly FortiClient 7.2.11 y 7.0.X on Windows 11 devices.We are working together with the customer and Microsoft support to troubleshoot an issue wher

JuanUlacNew Member

Problems to install ovf Fortimanager in vmware workstation 2025 NH2

Good morning, everyone. I have the following problem, but first, let me describe the scenario. I have a virtual FortiGate 8.0 installed (OVF file imported into VMware Workstation 25h2). It's already installed and configured correctly with web access.

160

11 hours ago

hwenStaff

Blogs

FortiAppSec Cloud Protection Against CVE-2026-49975 (HTTP/2 "Bomb") DoS

[delete post]

TsukzNew Member

Integrated Darktrace Syslog with FortiAnalyzer.

I have integrated Darktrace Syslog with FortiAnalyzer. When Darktrace sends logs in JSON format, the log messages are truncated in FortiAnalyzer. However, when I configure Darktrace to send logs in CEF format, the Message field in FortiAnalyzer is em

151

14 hours ago

osoleimaniStaff

Technical Tip: Deploying and verifying a FortiGate VM running FortiOS v8.0 on VMware Workstation Pro

DescriptionThis article describes how to deploy and verify a FortiGate VM running FortiOS v8.0 on VMware Workstation Pro. The procedure covers importing the FortiGate VM deployment package (.OVF), selecting a storage location, completing the VMware W

1461

7 hours ago

A

Anonymous_UserContributor III

Customer Service

Technical Tip: Fortinet stencils for use in diagrams - VSS SVG PNG

Description   This article describes that Fortinet provides a selection of Visio stencils in the form of a VSS file for use in diagrams as well as SVG PNG.   Scope   Fortinet drawings, icons, and presentations.   Solution The offi

Anonymous_UserContributor III

Technical Tip: FortiGate IPsec VPN resource list

Description   This article describes how Virtual Private Network (VPN) technology enables users to connect to private networks securely.   RFC 6071 describes IPsec (Internet Protocol Security) as a suite of protocols that provides secu

429023

nathan_hStaff & Editor

Troubleshooting Tip: 'SSL VPN Proxy Error. Reason: Access Denied'

Description   This article describes how to resolve the error 'SSL VPN Proxy Error. Reason: Access Denied'.   Scope   FortiGate v7.x.x.   Solution   The user sees an error 'SSL VPN Proxy Error. Reason: Access Denied' when acc

157191

akanibekStaff

Technical Tip: FortiGate IPsec dial-up IKEv2 SAML-based authentication with FortiAuthenticator as IdP

Description This article describes how to configure an IPSec IKEv2 SAML-based authentication, with a FortiAuthenticator acting as an IdP. The article describes the FortiGate settings, rather than the FortiAuthenticator. Scope FortiAuthenticator

156751

16 hours ago

riteshpvStaff

FortiSwitch

Technical Tip: FortiSwitch Offline with Event old_state 13

DescriptionThis article describes one of the reasons why a FortiSwitch may go offline and generate the event old_state 13.ScopeFortiSwitch, FortiGate.SolutionOne of the conditions that causes a FortiSwitch to reconnect to the FortiLink interface is a

60

16 hours ago

tbaruaStaff

FortiPAM

Troubleshooting Tip: Consideration of SSH filter on SUSE server

DescriptionThis article describes how to resolve issues caused by an incompatible shell prompt format when using an SSH filter profile in FortiPAM with a SUSE server.ScopeFortiPAM, SUSE server.SolutionThe issue arises due to the shell prompt format o

281

19 hours ago

mgoswamiStaff