Welcome to the Fortinet Community!

Some Website not loading with Deep Inspection

Since about 2-3 hours some Website are not loading anymore when deep inspection is applied. Just timeout or connection reset after some time.We are using different Fortigate Models and different Firmware (7.6.8 / 7.4.13).Seems to be a global issue ac

2292

12 minutes ago

Deepak_Girimaji_FTNTStaff

published in FortiADC

How to block PHP2Shell (CVE-2026-109618, CVE-2026-109619) on FortiADC

DescriptionA guide to the signature database version that can block PHP2Shell (CVE-2026-109618, CVE-2026-109619) on FortiADC.ScopeFortiADC.SolutionA remote attacker may be able to exploit this to cause an out-of-memory error and in the worst case exe

40

24 minutes ago

icianciStaff

FortiManager version 7.6.8 trying to install ssl-ssh-profile settings that are not supported on 2GB FortiGate devices

DescriptionTroubleshooting steps for installation failure in FortiManager version 7.6.8 due to the 'udp-not-quic' option under 'config firewall ssl-ssh-profile' when installing to FortiGate models with 2GB of memory.ScopeFortiManager. SolutionIn ver

7575

41 minutes ago

mgoswamiStaff

Unable to delete the default admin account after migration to AHV

DescriptionAn issue where the default admin account cannot be deleted from FortiManager after migration to a Nutanix AHV environment.ScopeThis issue has been reported in FortiManager 7.4.11, where the previous environment used was 7.4.8.SolutionThis

20

51 minutes ago

amaristreNew Member

Problems with APS devices disconnecting and reconnecting on the 2.4 GHz band

I am experiencing an interference problem inside a room where we have set up one access point inside the room and another outside it.In total, I have 9 Fortinet access points spread across our offices on the 5th and 6th floors.However, for some time

70

mvlasakStaff

How to check and clear the firmware upgrade profile database (scheduled upgrade tasks) on FortiManager

DescriptionInstructions to check the firmware upgrade profile database on FortiManager with the diagnose fwmanager profile commands. It also describes how to clear the stored profile entries.ScopeFortiManager 7.2.3, 7.4.0, 7.6.0, 8.0.0 and later.Solu

30

vrajendranStaff

Slow dynamic VLAN assignment when using 802.1X and MAC authentication bypass

DescriptionThis article describes a delay in transitioning a FortiSwitch port to the configured Guest VLAN after a RADIUS server rejects an authentication request. Changing the authentication priority in the 802.1X security policy can help reduce the

40

Users redirected to site publish login page after entering FortiToken 2FA

ldsouzaStaff

published in FortiWeb

DescriptionUsers are redirected back to the initial login page instead of the protected resource after successfully entering their two-factor authentication token in a FortiWeb site publishing configuration.ScopeFortiWeb.SolutionSymptomsWhen using si

70

HS08Valued Contributor

IPsec VPN RA

When we migrate from SSL VPN to IPsec VPN, we currently use different firewall policies based on user groups to separate access for each vendor. In that case, would the firewall policies be configured as follows?config firewall policy edit 1

233

I

i_cNew Member

IPSEC 'AUTH payload not received'

fortigate FG201f running 7.4.12 b2902forticlient 7.4.8, managed by forticloudintune pki (CloudPKI)the payload (via sniff) appears to be sent, but fortigate ignores as the tunnel has been ignored.wanting to set up a device cert based TCP IPSEC tunnel.

542

solaeVisitor III

Some Website not loading with Deep Inspection

Since about 2-3 hours some Website are not loading anymore when deep inspection is applied. Just timeout or connection reset after some time.We are using different Fortigate Models and different Firmware (7.6.8 / 7.4.13).Seems to be a global issue ac

2292

12 minutes ago

amaristreNew Member

Problems with APS devices disconnecting and reconnecting on the 2.4 GHz band

I am experiencing an interference problem inside a room where we have set up one access point inside the room and another outside it.In total, I have 9 Fortinet access points spread across our offices on the 5th and 6th floors.However, for some time

70

I

i_cNew Member

IPSEC 'AUTH payload not received'

fortigate FG201f running 7.4.12 b2902forticlient 7.4.8, managed by forticloudintune pki (CloudPKI)the payload (via sniff) appears to be sent, but fortigate ignores as the tunnel has been ignored.wanting to set up a device cert based TCP IPSEC tunnel.

542

F

fmonNew Member

Multiple PLC devices on individual Vlan's with overlapping ip's subnet. Need to setup 2 way traffic

I have a FortiGate firewall with FortiGate switches all connected via Fortilink in the firewall. I have a requirement to now connect 20 PLC devices that share the same ip addresses to our network. I am not able to re-ip the PLC devices so need to f

391

chinerNew Member

FortiExtender WAN Extension in NAT Mode?

Hello,we currently use several FortiExtenders as WAN extensions in combination with 5G, SIM cards an IP passthrough. While this seems like the optimal solution we randomly encounter issues because the ISP assigns random CGNAT subnets through DHCP wit

461

S

SUVNew Member

FortiClient VPN Deployment via SOTI MDM on Android Devices

Hello Fortinet Support,We are looking for guidance on deploying and configuring the FortiClient VPN application on Android devices managed through SOTI MobiControl.Our goal is to deploy FortiClient with a predefined VPN configuration, including authe

341

NeMTNew Member

FortiAPs are offline but can be pinged from firewall and pass CAPWAP traffic

Need help troubleshooting. Already did factory reset of APs, deauthorize and re-authorize as well as the following.Killed CAPWAP process - diagnose sys kill 11 <PID_of_cw_acd>Ran command - diagnose wireless-controller wlac -d wtp [SN] [reset]

381

11loraNew Member

FortiGate G-series: are you seeing a notification for the 7.4.13 upgrade?

Our 700G, running version 7.4.12, is not showing a notification that version 7.4.13 is available (I expect I’ll just update it manually soon). The licenses are valid, and the Fortinet servers are reachable. Do you know why this is happening? Is anyon

130

Anthony_coleNew Member

FortiClient IPsec VPN timeout

HI all,I’ve run into a tricky issue on an IPsec Remote Access VPN connection with Forticlient.my FG version: ’FortiGate-50G v7.4.8,build2795,250523 (GA.M)’, FG can see internet, and here is the configuration of IPsec Phase1:FortiGate-50G # config vp

130

H

HamoonVisitor II

FortiClient VPN 7.4.3 Freezing on macOS 27.0.1 – Compatibility Issue or Known Bug?

Hello Fortinet Community,We are experiencing recurring FortiClient VPN connection issues with one of our customers and would appreciate your advice.System Information:Device: MacBook Pro (Apple M1 Pro) Operating System: macOS 27.0.1 FortiClient VPN:

1012

H

3 hours ago

Deepak_Girimaji_FTNTStaff

published in FortiADC

How to block PHP2Shell (CVE-2026-109618, CVE-2026-109619) on FortiADC

DescriptionA guide to the signature database version that can block PHP2Shell (CVE-2026-109618, CVE-2026-109619) on FortiADC.ScopeFortiADC.SolutionA remote attacker may be able to exploit this to cause an out-of-memory error and in the worst case exe

40

24 minutes ago

icianciStaff

FortiManager version 7.6.8 trying to install ssl-ssh-profile settings that are not supported on 2GB FortiGate devices

DescriptionTroubleshooting steps for installation failure in FortiManager version 7.6.8 due to the 'udp-not-quic' option under 'config firewall ssl-ssh-profile' when installing to FortiGate models with 2GB of memory.ScopeFortiManager. SolutionIn ver

7575

41 minutes ago

mgoswamiStaff

Unable to delete the default admin account after migration to AHV

DescriptionAn issue where the default admin account cannot be deleted from FortiManager after migration to a Nutanix AHV environment.ScopeThis issue has been reported in FortiManager 7.4.11, where the previous environment used was 7.4.8.SolutionThis

20

51 minutes ago

mvlasakStaff

How to check and clear the firmware upgrade profile database (scheduled upgrade tasks) on FortiManager

DescriptionInstructions to check the firmware upgrade profile database on FortiManager with the diagnose fwmanager profile commands. It also describes how to clear the stored profile entries.ScopeFortiManager 7.2.3, 7.4.0, 7.6.0, 8.0.0 and later.Solu

30

vrajendranStaff

Slow dynamic VLAN assignment when using 802.1X and MAC authentication bypass

DescriptionThis article describes a delay in transitioning a FortiSwitch port to the configured Guest VLAN after a RADIUS server rejects an authentication request. Changing the authentication priority in the 802.1X security policy can help reduce the

40

Users redirected to site publish login page after entering FortiToken 2FA

ldsouzaStaff

published in FortiWeb

DescriptionUsers are redirected back to the initial login page instead of the protected resource after successfully entering their two-factor authentication token in a FortiWeb site publishing configuration.ScopeFortiWeb.SolutionSymptomsWhen using si

70

TCP FIN packets not acknowledged or forwarded in Layer 4 Virtual Server

ldsouzaStaff

published in FortiADC

DescriptionBackend servers retransmit TCP FIN packets because FortiADC closes the session due to a timeout without notifying the endpoints, leading to perceived service slowness.ScopeFortiADC.SolutionSymptomsBackend servers initiate TCP session closu

80

DPadulaStaff & Editor

Technical Tip: Explaining 'diagnose traffictest' command limitation on FortiOS

DescriptionThis article describes the limitations of the 'diagnose traffictest' command and how to properly test hardware throughput trafficScopeAll FortiGate models.SolutionIPERF is a tool used for active measurements of the maximum achievable bandw

23701

R

published in FortiAuthenticator

kgurbuzStaff

RADIUS attributes of users cleared during CSV file import

DescriptionImporting users via a CSV file with the 'Keep existing user accounts' option enabled may clear RADIUS attributes of existing accounts and prevent user authentication.ScopeFortiAuthenticator.SolutionRADIUS attributes of users that are not i

90

DPadulaStaff & Editor

Configuring only one modem interface for a FortiExtender

Description:An explanation of how to set up only a single modem in FortiExtender. Setting up multiple FortiExtender modems on FortiGate requires that two Modem interfaces are configured. This article explains how to overcome the requirement to set up

110

Top Helpful Authors

Currently there are no user.

VIEW ALL

Badge Updates

Lucas_Hellmannhas earned the badge First Reply
dxallesahas earned the badge Voice of the Community
nicolasbhas earned the badge Voice of the Community

VIEW ALL

Events

Start Conversation

Find and follow interesting people, join groups for discussion and share files

Featured Articles

Recommended release for FortiOS

DescriptionRecommendations for the most appropriate FortiOS software release. The recommendations stated below are the latest as of October 2026, and...

3 years ago

457511313

Technical Tip: FortiGuard is not reachable via Anycast default method

DescriptionThis article describes how to troubleshoot FortiGuard connectivity when the Anycast default method does not work.ScopeFortiGate v6.4.3 and...