Welcome to the Fortinet Community!

OSPF still forming adjacency over VDOM link when one VDOM is disabled?

Hi,I’m facing a behavior that seems counter‑intuitive regarding OSPF over inter‑VDOM links. I am in a multi‑VDOM setup:OSPF is configured between VDOMs over a VDOM link Each VDOM has its own routing instance (OSPF process) According to documentation:

241

3 minutes ago

arw357New Member

forticlient for linux - invalid option -- 'P'

I've just installed  FortiClient VPN  the .deb package from here https://www.fortinet.com/support/product-downloads .installed with `sudo dpkg -i ...` Setupd the configuration ( as I have on my windows pc and on my android ) 

Pavan_ChinthaStaff

Technical Tip: Back up configuration using SFTP issue via the IPsec Site to Site Tunnel in policy based mode

Description This article describes a scenario where the backup configuration using SFTP is failing via the IPsec Site-to-Site VPN in policy-based mode. Scope FortiGate. Solution From the CLI, administrators have the option to backup the confi

Andre.FabioNew Member

Unresponsive New Fortigate

Hello,I’m trying to configure two different Fortigates 60F but both of these devices are unresponsive.I tried connecting via Ehternet on LAN 1 but i get no address via DHCP (no IP was released and i have APIPA address) , i tried setting up manual wit

steven4Visitor III

AGENTLESS ZTNA Tutorial

Hello there,can anyone suggest any other tutorial for agentless ZTNA rather than fortinet official documentation. I don’t understand it how to implement correctly. any video, documentation, guides, articles would be appreciated.

27612

1 hour ago

AEKSuperUser

Recommended FortiAuthenticator version

HelloCurrently the latest available versions of FAC are:6.6.16.5.56.4.9I preferred avoid 6.6.1 for my production since it is new version (I guess not mature yet).So I have few questions regarding 6.4 and 6.5.Is 6.4.x still supported? (because I notic

Potato168Explorer

How to know the reason why a tag was assigned/unaissgned to a EMS client?

Hi all, I am using Forticlient EMS cloud with Fortigate to achieve ZTNA. We have some endpoints tag changed for some reason, and we wanna know the reason to resolve the issue. But seems the Fortinet log only told that tag was assigned/unaissgned to a

212

GGMACHAINStaff

Troubleshooting Tip: Internal 500 error when accessing some URLs and AV profile applied in Firewall policy

DescriptionThis article describes how to resolve issues where the '500 Internal Error' screen appears.ScopeFortiGate 7.4.x.SolutionAfter an automatic update of the AV engine to version 7.00049, some users have reported failures that display the messa

70

sakshaykumarStaff

Troubleshooting Tip: FortiGate 70G with newer BIOS version fails to boot after downgrade to FortiOS v7.2

Description This article describes an issue where FortiGate 70G devices with BIOS version 0600020x may hang at the 'Initializing firewall…' stage after installing FortiOS 7.2.x firmware. Scope FortiGate 70G with BIOS version 0600020X, Forti

6861

rmukherjeeStaff

Troubleshooting Tip: IPsec VPN connection fails with error 'twin connection detected'

DescriptionThis article describes a known behavior in which FortiGate devices fail to process the IKE_AUTH response during IKEv2 negotiation, resulting in VPN connection failures with the error 'twin connection detected'.ScopeFortiOS.SolutionUnder no

B-WVisitor III

OSPF still forming adjacency over VDOM link when one VDOM is disabled?

Hi,I’m facing a behavior that seems counter‑intuitive regarding OSPF over inter‑VDOM links. I am in a multi‑VDOM setup:OSPF is configured between VDOMs over a VDOM link Each VDOM has its own routing instance (OSPF process) According to documentation:

241

3 minutes ago

arw357New Member

forticlient for linux - invalid option -- 'P'

I've just installed  FortiClient VPN  the .deb package from here https://www.fortinet.com/support/product-downloads .installed with `sudo dpkg -i ...` Setupd the configuration ( as I have on my windows pc and on my android ) 

Andre.FabioNew Member

Unresponsive New Fortigate

Hello,I’m trying to configure two different Fortigates 60F but both of these devices are unresponsive.I tried connecting via Ehternet on LAN 1 but i get no address via DHCP (no IP was released and i have APIPA address) , i tried setting up manual wit

steven4Visitor III

AGENTLESS ZTNA Tutorial

Hello there,can anyone suggest any other tutorial for agentless ZTNA rather than fortinet official documentation. I don’t understand it how to implement correctly. any video, documentation, guides, articles would be appreciated.

27612

1 hour ago

AEKSuperUser

Recommended FortiAuthenticator version

HelloCurrently the latest available versions of FAC are:6.6.16.5.56.4.9I preferred avoid 6.6.1 for my production since it is new version (I guess not mature yet).So I have few questions regarding 6.4 and 6.5.Is 6.4.x still supported? (because I notic

Potato168Explorer

How to know the reason why a tag was assigned/unaissgned to a EMS client?

Hi all, I am using Forticlient EMS cloud with Fortigate to achieve ZTNA. We have some endpoints tag changed for some reason, and we wanna know the reason to resolve the issue. But seems the Fortinet log only told that tag was assigned/unaissgned to a

212

M1kemclain247Visitor III

Migration from SSL VPN to IKEv2 IPSEC dialup VPN for forticlient - with Cisco Duo Proxy VM for 2FA 'wrong credentials, eap failed'

Hi so we still havent found a solution yet. N.B. - Final Goal - is to have the same SSLVPN dialup discontinued - with new IPSEC Dialup IKEv2 - Firewall rules that control which AD User - user groups - can access which resources. This wo

RVTim10New Member

TFTP Firmware Recovery issues with some recent Fortigate Firmware

I have recently opened a ticket with Fortinet and shared this information so that Fortinet can fix a problem that was recently introduced in some of the newer 7.4 versions (such as 7.4.10, 7.4.11 and possibly earlier and later versions). It may affe

Rabeb_AliExplorer II

FortiSwitch SFP+ to 1G SFP

Hello,Is it possible to establish a fiber link between:a FortiSwitch SFP+ port using a 10G SFP+ transceiver and a third-party switch using a 1G SFP transceiverby forcing the FortiSwitch interface speed to 1G?I would like to know if: SFP+ transceivers

NitSiNew Member

Hi- I am trying to take config backup using CLI and facing errors. Pings, Trace, Sniffer all are giving outputs FTP - Getting bellow errorConnect to ftp server <FTP server IP>Please wait...Send config file to ftp server via vdom root failed.Com

Pavan_ChinthaStaff

Technical Tip: Back up configuration using SFTP issue via the IPsec Site to Site Tunnel in policy based mode

Description This article describes a scenario where the backup configuration using SFTP is failing via the IPsec Site-to-Site VPN in policy-based mode. Scope FortiGate. Solution From the CLI, administrators have the option to backup the confi

GGMACHAINStaff

Troubleshooting Tip: Internal 500 error when accessing some URLs and AV profile applied in Firewall policy

DescriptionThis article describes how to resolve issues where the '500 Internal Error' screen appears.ScopeFortiGate 7.4.x.SolutionAfter an automatic update of the AV engine to version 7.00049, some users have reported failures that display the messa

70

sakshaykumarStaff

Troubleshooting Tip: FortiGate 70G with newer BIOS version fails to boot after downgrade to FortiOS v7.2

Description This article describes an issue where FortiGate 70G devices with BIOS version 0600020x may hang at the 'Initializing firewall…' stage after installing FortiOS 7.2.x firmware. Scope FortiGate 70G with BIOS version 0600020X, Forti

6861

rmukherjeeStaff

Troubleshooting Tip: IPsec VPN connection fails with error 'twin connection detected'

DescriptionThis article describes a known behavior in which FortiGate devices fail to process the IKE_AUTH response during IKEv2 negotiation, resulting in VPN connection failures with the error 'twin connection detected'.ScopeFortiOS.SolutionUnder no

60

GGMACHAINStaff

Technical Tip: Low performance on tunnel-mode SSID while bridge-mode SSID works normally

DescriptionThis article describes how to improve the performance of tunnel-mode SSIDs in environments using Fortinet FortiAP devices.ScopeFortiGate, FortiAP.SolutionThere have been reports of low performance on tunnel-mode SSIDs in FortiAP environmen

70

Technical Tip: User cannot authenticate with error 'Received packet from x.x.x.x with invalid Message-Authenticator! (Shared secret is incorrect.) (from client x.x.x.x)'

dbuStaff

FortiNAC-F

DescriptionThis article describes how to solve an issue where authentication fails with the error 'Shared secret is incorrect' while trying to integrate a Huawei switch in FortiNAC.ScopeFortiNAC-F.SolutionIn this scenario, there is an issue integrati

60

NivedhaStaff

Troubleshooting Tip: Unable to backup FortiGate config to external FTP server: 'Send config file to ftp server via vdom root failed. Command fail. Return code 12'

Description This article discusses an issue when the backup of the firewall config to the FTP server does not work. Scope FortiGate. Solution To backup config to the FTP server, use this link: Technical Tip: Backup of configuration file from

ebilcariStaff

Technical Tip: Authenticating local users with EAP‑PEAP protocol

DescriptionThis article describes the configuration steps required in FortiNAC to enable EAP‑PEAP authentication for local users.Scope FortiNAC.SolutionThe details of EAP-PEAP/MSCHAPv2 authentication are covered in Technical Tip: MSCHAPv2 authenticat

120

7 hours ago

NurStaff

FortiAnalyzer

Technical Tip: How to allow TACACS+ user upgrade the Firmware of FortiAnalyzer

DescriptionThe article describes the issue when the TACACS+ user is not able to upgrade the firmware version. When a TACACS+ user upgrades the firmware version, the error pop-up 'You have no permission to access this URL' appears.ScopeFortiAnalyzer a

120

12 hours ago

adhillonStaff