Welcome to the Fortinet Community!

IPSEC - Timeouts - between FG201F Cluster 7.2.13 and SFOS 22.0.0 GA-Build411

Hello everyone, We have been trying for weeks to establish a stable connection between two data centres. Our router is the Sophos Appliance and the remote site uses the Fortinet cluster. The connection is established successfully. Ping works, but the

375

C

6 minutes ago

DuyVssNew Member

Using Zalo cannot make calls

I'm using a FortiGate device, but I can't make calls to others via Zalo. I can still send messages, upload files, and others can call me via Zalo. I've checked the logs and debugged, and everything seems to be allowed; there are no logs of rejected o

90

20 minutes ago

NurStaff

FortiAnalyzer

Technical Tip: How to allow TACACS+ user upgrade the Firmware of FortiAnalyzer

DescriptionThe article describes the issue when the TACACS+ user is not able to upgrade the firmware version. When a TACACS+ user upgrades the firmware version, the error pop-up 'You have no permission to access this URL' appears.ScopeFortiAnalyzer a

80

31 minutes ago

palakgupta1Community Manager

Test code block

steven4Visitor III

AGENTLESS ZTNA Tutorial

Hello there,can anyone suggest any other tutorial for agentless ZTNA rather than fortinet official documentation. I don’t understand it how to implement correctly. any video, documentation, guides, articles would be appreciated.

DevonlutVisitor III

Port used by Fortiguard auth-port-warning?

Hi All, I want to ask about URL Filter in Webfilter Profile.I added a URL Filter Exempt(type:wildcard).Target url to use 8020 port, but Access block. I checked this KB: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Resolve-issue

22202

57 minutes ago

yeowkm99New Member

Team viewer quick support file

Recently we have feedback from users that they cannot get the team viewer quick support exe file TeamViewerhow do i whitelist this URL so that my users can get the file for remote support ?

101

mbasExplorer II

It is not possible to delete rogue devices from the FortiNAC database if there are too many

Hi all, I am installing FortiNAC in a large environment and I added the Aruba WLC to FortiNAC without any issues. 3 days later, FortiNAC performed L2 pooling and discovered over 400,000 rogue hosts. After that, I disabled L2 pooling for the WLC, whic

341

dkerVisitor III

IPSec one hub multiple spokes with a single phase 1

Hello, I have a headquarters site with a FortiGate firewall.We also have multiple secondary sites across the country. Each remote site normally uses its primary ISP connection ( through MPLS) to access the corporate network. Our goal is the

4933

Best Practice: Recommended Parsers for Windows and Linux Devices in FortiSIEM

W

Wesley GamaVisitor III

FortiSIEM

Hi everyone,I'd like to better understand, from a real-world operational perspective, which parsers you consider essential/recommended for Windows and Linux devices in FortiSIEM (7.4.x / 7.5.x), especially considering: Better security visibility Re

CordialNew Member

IPSEC - Timeouts - between FG201F Cluster 7.2.13 and SFOS 22.0.0 GA-Build411

Hello everyone, We have been trying for weeks to establish a stable connection between two data centres. Our router is the Sophos Appliance and the remote site uses the Fortinet cluster. The connection is established successfully. Ping works, but the

DuyVssNew Member

Using Zalo cannot make calls

I'm using a FortiGate device, but I can't make calls to others via Zalo. I can still send messages, upload files, and others can call me via Zalo. I've checked the logs and debugged, and everything seems to be allowed; there are no logs of rejected o

steven4Visitor III

AGENTLESS ZTNA Tutorial

Hello there,can anyone suggest any other tutorial for agentless ZTNA rather than fortinet official documentation. I don’t understand it how to implement correctly. any video, documentation, guides, articles would be appreciated.

yeowkm99New Member

Team viewer quick support file

Recently we have feedback from users that they cannot get the team viewer quick support exe file TeamViewerhow do i whitelist this URL so that my users can get the file for remote support ?

101

mbasExplorer II

It is not possible to delete rogue devices from the FortiNAC database if there are too many

Hi all, I am installing FortiNAC in a large environment and I added the Aruba WLC to FortiNAC without any issues. 3 days later, FortiNAC performed L2 pooling and discovered over 400,000 rogue hosts. After that, I disabled L2 pooling for the WLC, whic

341

Best Practice: Recommended Parsers for Windows and Linux Devices in FortiSIEM

W

Wesley GamaVisitor III

FortiSIEM

Hi everyone,I'd like to better understand, from a real-world operational perspective, which parsers you consider essential/recommended for Windows and Linux devices in FortiSIEM (7.4.x / 7.5.x), especially considering: Better security visibility Re

301

M1kemclain247Visitor III

Migration from SSL VPN to IKEv2 IPSEC dialup VPN for forticlient - with Cisco Duo Proxy VM for 2FA 'wrong credentials, eap failed'

Hi so we still havent found a solution yet. N.B. - Final Goal - is to have the same SSLVPN dialup discontinued - with new IPSEC Dialup IKEv2 - Firewall rules that control which AD User - user groups - can access which resources. This wo

302

ens160New Member

FortiGate-VM64 upgrade path from 7.0.19: which VM model should I select?

Hi everyone,I need to upgrade a FortiGate-VM64 currently running FortiOS 7.0.19.Relevant output from get system status:Version: FortiGate-VM64 v7.0.19, build0696, 260129 (GA.M)License Status: ValidVM Resources: 2 CPU / 2 allowed, about 4 GB RAMCurren

anju_125New Member

Forti SIEM Collector and Supervisor Communication Issue

Environment: Cluster (Supervisor & Workers): Residing in VDC-A using private IPs. A Public IP pool is assigned to the VDC with NAT and Firewall rules mapping to the Supervisor and Workers. Collector: Residing in VDC-B. It has a Public IP associ

willy007Visitor III

FortiGate VM cannot retrieve FortiManager serial number – FMG 7.6.6

Hello everyone,I am currently experiencing an issue integrating a FortiGate VM with a FortiManager VM (version 7.6.6).When trying to authorize the FortiManager from the FortiGate GUI, I receive the following error:"Could not connect to the FortiManag

944

2 hours ago

NurStaff

FortiAnalyzer

Technical Tip: How to allow TACACS+ user upgrade the Firmware of FortiAnalyzer

DescriptionThe article describes the issue when the TACACS+ user is not able to upgrade the firmware version. When a TACACS+ user upgrades the firmware version, the error pop-up 'You have no permission to access this URL' appears.ScopeFortiAnalyzer a

80

31 minutes ago

palakgupta1Community Manager

Test code block

adhillonStaff

Troubleshooting Tip: Firewall displays warning message with incorrect build number during manual upgrade to v7.4.11

DescriptionThis article describes a warning message commonly observed when upgrading a 3700D firewall to v7.4.11.ScopeFortiGate D-series platform supporting FortiOS v7.4, such as FortiGate-3700D.SolutionD-series models upgrading to the initial v7.4.1

160

Technical Tip: How to display MAC address table of a managed FortiSwitch from FortiGate CLI

lsaroukhaniStaff

FortiSwitch

DescriptionThis article describes how to display the MAC address list of a managed FortiSwitch from the FortiGate CLI.ScopeManaged FortiSwitch, FortiGate.SolutionTopology:The full MAC address table of a managed FortiSwitch can be displayed with the F

50

Technical Tip: Packet capture and debug behavior in FortiGate HA vCluster Mode

hamidrStaff

FortiGate

DescriptionThis article describes packet capture, debug flow, and session visibility behavior in FortiGate HA vCluster mode when a VDOM is active on the secondary HA member.In Active-Standby HA with vCluster enabled, different VDOMs can be active on

120

Technical Tip: How to display LLDP, trunk and STP information of a managed FortiSwitch from FortiGate CLI

lsaroukhaniStaff

FortiSwitch

DescriptionThis article describes how to display LLDP, trunk and STP information of a managed FortiSwitch from the FortiGate CLI.ScopeManaged FortiSwitch, FortiGate.SolutionTopology:LLDP Information:The LLDP table of a managed FortiSwitch can be disp

80

Troubleshooting Tip: Service status shows as 'Pending' for FortiGate HA under FortiGuard

smkmlStaff

FortiManager

DescriptionThis article describes how to troubleshoot a status that persistently shows as Pending for an HA FortiGate under FortiGuard -> Packages -> Service Status.ScopeFortiManager and FortiGate.SolutionMake sure FortiGate has a valid license

40