Support Forum
- - Knowledge Base
Community Groups
Blogs

Create topic
Login

Celebrating our Community: Thank You for an Incredible Month

1 month ago

Welcome to the Fortinet Community!

73,830 Discussions
83,863 Replies
209,264 Members

Community Guidelines

Consult our Support Forum

Explore the Fortinet Knowledge Base

Ask questions and help others

Top Community Conversations

Recent activity
Unanswered
Recent KB Articles

HS08Visitor III

Support Forum

Fortinac Device Profiling

I have device profiling rule to move all ipphone to IPPhone group. Test the rule manually for one ipphone and the rule is matches, but why the IPPhone group not have any member?

231

5 minutes ago

Epitaph91New Member

Support Forum

Domain was blocked by dns botnet C&C

Is anyone else seeing a large amount of “Domain was blocked by DNS botnet C&C” alerts for valid URLS?the commonality is that its akamai and the common 5 IP addresses are the following.23.223.209.3223.33.44.22823.44.201.23423.57.90.6823.33.40.7

HS08Visitor III

if we want tio bulid HA for Fortinac then we need sopecial license? Currently my Fortinac located in on-prem and if i want to build the HA can i use 2nd Fortinac on Azure Cloud?

101

17 minutes ago

MandalorianExplorer III

Support Forum

Manual configuration on FortiClient (VPN Only) for MacOS: Can it be done ?

Hi everyone,I wanted to know if it's possible to manually edit these parameters on the unlicenced FortiClient (VPN Only) version for MacOS ?See the image below: In particular, I need to be sure whether the <eap_method>2</eap_method> para

91

21 minutes ago

kdaveStaff

FortiSIEM

Troubleshooting Tip: How to resolve the phAnomalyWorker continuously getting restarted on the worker after installation

Description This article describes how to resolve the phAnomalyWorker continuously getting restarted on the worker after installation. Scope FortiSIEM. Solution It has been observed that the phAnomalyWorker process continuously gets restarted

1161

25 minutes ago

M

Marcelo SallesNew Member

Support Forum

LICENÇA DE ATIVOS USADOS

A FORTINET DEVERIA DE REVER A LIBERAÇÕES DE ATIVOS NAO ADMINISTRADOS POR PARCEIROS E PERMITIR A INCLUSOES EM NOVAS CONTAS E DISPONIBILIZAR ATUALIZAÇÕES PARA EMAIL CADASTRADOS SEM ATIVOS CADASTRADOS.

AnjuVisitor III

FortiWLC 4200 WLC 500D External Captive Portal with Aruba ClearPass - RADIUS authentication succeeds but controller shows Authentication Failed

Hi everyone,I'm trying to integrate FortiWLC 8.6-5 build-8 (FortiWLC-500D) with Aruba ClearPass Guest (ClearPass Policy Manager 6.12.7.308288 on C3010 platform) as an external captive portal.Current setupFortiWLC 8.6-5 build-8 External captive portal

653

31 minutes ago

R00k13-NSNew Member

Support Forum

How the Web Filter Works

Hello,I need to grant a specific USER/IP access to a specific path, which is as follows:https://dl.k8s.io/release/v1.36.1/bin/windows/amd64/kubectl.exeI usually use STATIC URL entries, where I typically set the FQDN to “SIMPLE” and “MONITOR” modes—me

323

33 minutes ago

RobertoSNew Member

Support Forum

FortiClient Enterprise Linux IPsec disconnects exactly ~9 seconds after successful connection (RHEL 9 / Ubuntu 24.04)

Hi everyone,We are troubleshooting what appears to be a Linux-specific FortiClient Enterprise issue and I would like to know if anyone has experienced something similar.Environment:FortiClient Enterprise Linux 7.4.7 build 5438 FortiGate 7.4.x IPsec V

493

35 minutes ago

emmanuelgonzalez914Staff

FortiPAM

Technical Tip: Web browser launcher uses the existing SAML SSO session when FortiPAM and the target application share the same Identity Provider

DescriptionThis article describes why a Web Browser Launcher may authenticate with the same SAML Single Sign-On (SSO) user that is already authenticated in the FortiPAM administrative session, even when the secret is configured with a different accou

30

40 minutes ago

HS08Visitor III

Support Forum

Fortinac Device Profiling

I have device profiling rule to move all ipphone to IPPhone group. Test the rule manually for one ipphone and the rule is matches, but why the IPPhone group not have any member?

231

5 minutes ago

Epitaph91New Member

Support Forum

Domain was blocked by dns botnet C&C

Is anyone else seeing a large amount of “Domain was blocked by DNS botnet C&C” alerts for valid URLS?the commonality is that its akamai and the common 5 IP addresses are the following.23.223.209.3223.33.44.22823.44.201.23423.57.90.6823.33.40.7

HS08Visitor III

if we want tio bulid HA for Fortinac then we need sopecial license? Currently my Fortinac located in on-prem and if i want to build the HA can i use 2nd Fortinac on Azure Cloud?

101

17 minutes ago

MandalorianExplorer III

Support Forum

Manual configuration on FortiClient (VPN Only) for MacOS: Can it be done ?

Hi everyone,I wanted to know if it's possible to manually edit these parameters on the unlicenced FortiClient (VPN Only) version for MacOS ?See the image below: In particular, I need to be sure whether the <eap_method>2</eap_method> para

91

21 minutes ago

M

Marcelo SallesNew Member

Support Forum

LICENÇA DE ATIVOS USADOS

A FORTINET DEVERIA DE REVER A LIBERAÇÕES DE ATIVOS NAO ADMINISTRADOS POR PARCEIROS E PERMITIR A INCLUSOES EM NOVAS CONTAS E DISPONIBILIZAR ATUALIZAÇÕES PARA EMAIL CADASTRADOS SEM ATIVOS CADASTRADOS.

AnjuVisitor III

FortiWLC 4200 WLC 500D External Captive Portal with Aruba ClearPass - RADIUS authentication succeeds but controller shows Authentication Failed

Hi everyone,I'm trying to integrate FortiWLC 8.6-5 build-8 (FortiWLC-500D) with Aruba ClearPass Guest (ClearPass Policy Manager 6.12.7.308288 on C3010 platform) as an external captive portal.Current setupFortiWLC 8.6-5 build-8 External captive portal

653

31 minutes ago

R00k13-NSNew Member

Support Forum

How the Web Filter Works

Hello,I need to grant a specific USER/IP access to a specific path, which is as follows:https://dl.k8s.io/release/v1.36.1/bin/windows/amd64/kubectl.exeI usually use STATIC URL entries, where I typically set the FQDN to “SIMPLE” and “MONITOR” modes—me

323

33 minutes ago

RobertoSNew Member

Support Forum

FortiClient Enterprise Linux IPsec disconnects exactly ~9 seconds after successful connection (RHEL 9 / Ubuntu 24.04)

Hi everyone,We are troubleshooting what appears to be a Linux-specific FortiClient Enterprise issue and I would like to know if anyone has experienced something similar.Environment:FortiClient Enterprise Linux 7.4.7 build 5438 FortiGate 7.4.x IPsec V

HS08Visitor III

The port switch connected to the ipphone and if i plug endpoint to the port of the ipphone then the port switch is shutdown even there are no port security in the port switch. Anyone know why?I can see the log from the switch Jul 20 14:30:13: %AUTHMG

433

47 minutes ago

fireonVisitor III

Support Forum

HTTP_PROXY variable for specific application - please review

Hello all,I'm using SSL deep inspection through my Fortigate (FGT70G with FortiOS 7.6.7). It works well. The only problem is when applications do things that can't be allowed by any rule. So I've configured an explicit proxy on the Fort that does not

60

1 hour ago

kdaveStaff

FortiSIEM

Troubleshooting Tip: How to resolve the phAnomalyWorker continuously getting restarted on the worker after installation

Description This article describes how to resolve the phAnomalyWorker continuously getting restarted on the worker after installation. Scope FortiSIEM. Solution It has been observed that the phAnomalyWorker process continuously gets restarted

1161

25 minutes ago

emmanuelgonzalez914Staff

FortiPAM

Technical Tip: Web browser launcher uses the existing SAML SSO session when FortiPAM and the target application share the same Identity Provider

DescriptionThis article describes why a Web Browser Launcher may authenticate with the same SAML Single Sign-On (SSO) user that is already authenticated in the FortiPAM administrative session, even when the secret is configured with a different accou

30

40 minutes ago

EhanssenStaff

FortiGate

Troubleshooting Tip: CAPWAP encapsulated fragmented packet drops

DescriptionThis article describes why CAPWAP encapsulated fragmented packets may be dropped and provides workarounds.ScopeFortiOS v7.4.12 and v7.6.5.SolutionIn FortiOS v7.4.12 and v7.6.5, CAPWAP encapsulated small fragments may be dropped by the NP c

410

5 hours ago

GeorgeZhongStaff & Editor

FortiGate

Technical Tip: How to workaround the issue of interface configuration loss when upgrading FortiGate from FortiOS v7.6.4

DescriptionThis article describes an intermittent issue with FortiGate interface configuration loss when FortiGate reboots or upgrades in FortiOS v7.6.4, and how to work around this issue. This only happens to the FortiGate managed by FortiManager an

690

9 hours ago

johnathanStaff

FortiGate

Technical Tip: 'Invalid wildcard certificate' is seen when trying to connect a FIPS FortiGate to a FortiAnalyzer

DescriptionThis article describes why 'Invalid wildcard certificate' is seen when trying to connect a FIPS FortiGate to a FortiAnalyzer.ScopeFortiOS in FIPS mode.SolutionWhen connecting a FortiGate in FIPS mode to a FortiAnalyzer, a certificate for c

160

9 hours ago

edyrmishiStaff

FortiGate

Technical Tip: Intermittent traffic drops on FortiGate 200G and 201G SFP ports after firmware upgrade

DescriptionThis article describes an issue affecting FortiGate 200G and 201G devices, where intermittent internet connectivity outages may occur after upgrading from FortiOS v7.4.9 to v7.4.10, v7.6.5, or above. Symptoms are characterized by a total l

4231

20 hours ago

SAJUDIYAStaff

FortiGate

Technical Tip: SSL VPN/IPsec VPN is connected but received bytes show 0

Description This article describes the issue with FortiClient SSL VPN/IPsec VPN when connecting from a Windows 11 device. It connects, but the received bytes show 0 bytes. Scope FortiGate, Windows 11. Solution Try to reset the TCP/IP stack o

DiegMarcStaff

Technical Tip: Designing, implementing, and troubleshooting MCLAG on FortiSwitches managed by FortiGate

  Description This article describes how to design, implement, and troubleshoot Multichassis Link Aggregation Group (MCLAG) on FortiSwitches operating in FortiGate-managed mode. It includes architectural considerations, configuration, best p

16181

23 hours ago

tkannegantiStaff

FortiManager

Technical Tip: Configure FortiManager as local FDN server for FortiFirewall to get license validated (VM license, Device level license FMWR, AV, IPS etc.)

DescriptionThis article discusses whether the FortiFirewall can download the VM and Device licenses information from FortiManager acting as FortiGuard server, and how to identify the request and response on FortiManager to check the communication.Sco

280

1 day ago

ssrushtiStaff

FortiRecon

Outbreak Alert: Joomla SP Page Builder RCE

FortiRecon Digital Risk Protection (DRP), a SaaS-based service, includes External Attack Surface Management, Brand Protection, and Adversary Centric Intelligence.Adversary Centric Intelligence (ACI): leverages FortiGuard Threat Analysis to provide co

70

1 day ago

Top Helpful Authors

Currently there are no user.

VIEW ALL

Badge Updates

ailopezhas earned the badge Survey Monkey Badge
6sITdepthas earned the badge Survey Monkey Badge
Jotsu4520has earned the badge First Reply

VIEW ALL

Events

Start Conversation

Find and follow interesting people, join groups for discussion and share files

Featured Articles

Technical Tip: Adding an additional SWAP disk

Description This article describes how to add an additional SWAP disk. Scope FortiSIEM. Solution Add a new HDD of 20 to 30 GB from the Hyper...

Forum|Forum|3 months ago

1360

Technical Tip: FortiManager config push fails with commit failed error after upgrading it to v7.6.5 GA

DescriptionThis article describes how to resolve the installation task failure issue due to a post-commit check failure: wireless-controller vap - ssi...

Forum|Forum|3 months ago

6540

Technical Tip: Troubleshooting FortiGate not getting connected to FortiAnalyzer Cloud

Description This article describes the steps to troubleshoot a FortiGate device that is not getting connected and logging to FortiAnalyzer Cloud. The...

Forum|Forum|3 months ago

6460

Technical Tip: Clear old system logs in FortiSIEM

Description This article describes how to clear old logs. Scope FortiSIEM. Solution The following steps describe how to review the current space used...

Forum|Forum|3 months ago

2570

Fortigate Install on ProxMox

Good day,Trying to install fortigate on ProxMox but unable to do so. I followed the install guide but when the VM is started it gets stuck on formatti...

Forum|Forum|10 months ago

17413

Troubleshooting Tip: How to force a 4G LTE only or a 5G only connection via AT!SELRAT command on the FortiExtender-511G

Description This article describes the steps to force a 4G LTE-only or a 5G only connection via AT!SELRAT command on the FortiExtender-511G. Scope F...

Forum|Forum|3 months ago

2500

Troubleshooting Tip: How to solve booting loop on FortiSwitch-6xxF series when using soft reboot

Description This article describes how to solve the booting loop on FortiSwitch-6xxF series when using soft reboot. Scope FortiSwitch 6xxF-FPOE Seri...