Welcome to the Fortinet Community!

Question about Access Port Configuration on FortiGate

Hi everyone,I'm just starting my journey with Fortinet and studying for the NSE4, so I'm still learning how some concepts differ from Cisco.I have a quick question:Is there a way to configure a physical interface as an access port, similar to Cisco s

80

G

3 hours ago

J

janneman123Visitor II

dialup vpn connected through a site 2 site vpn

What am i missing with the configuration:I get the dialup VPN to connect(i.e i am connecting from the PC at port 5 and using 10.10.0.1 as my gateway in forticlient, and i can see that it assigns the correct VPN according to my mode cfg, but when i i

FabrichoundNew Member

FortiAP "Connected Via" on GUI issue

Hi allI have noticed a weird issue, client had a power outage over the weekend as the redid the server room UPS.Now my AP’s show “Connected VIA” my VOIP interface on the FortiGate, even tough they are connected via FortiSwitches and the LLDP Neighbor

LDV1New Member

FCRemove.exe for FortiClient v7.4.5

A couple days ago, I helped one of my clients with installing the FortiClient v7.4.5 on his computer using the FortiClientSetup_7.4.5_x64.exe file. But after the setup process was completed, we noticed that the domain name was not correct; it was sho

Ammar387New Member

Incident Events Not Displayed in Incident Details or Exported Reports

Hi everyone,I'm experiencing an issue in our FortiSIEM environment and would appreciate any suggestions or guidance.Issue DescriptionWhen navigating to Incidents → List and opening any incident, the Events tab does not display any associated event de

111

14 hours ago

Ammar387New Member

FortiSIEM

Logs Received by Collector but Not Available in Analytics or Log View

I’m experiencing an issue in FortiSIEM environment where devices are successfully communicating with the collector, but their logs are not available for analysis.Issue DescriptionThe affected devices are present in the CMDB. When expanding the device

403

ismailurek2New Member

IPsec dialup split DNS (internal-domain-list) ignored on FortiOS 7.6.7

Hi,FortiGate 7.6.7, IKEv2 dialup with EAP, mode-cfg and IPv4 split tunnel enabled. internal-domain-list is configured, but split DNS never takes effect: every DNS query from the client reaches the FortiGate, not only the two internal domains.config v

kima_25New Member

Cluster FW (A/P) without using vMAC

Hello,If we need to deploy a cluster of two FortiGate firewalls as VMs without using the virtual MAC (vMAC), and instead use the hypervisor-assigned MAC address of each firewall interface, I would like to confirm whether this type of cluster configur

342

assiah10New Member

Forticlient ZTNA / Clients lose affiliation with EMS

Hi,I would like to just ask around (not going to open an official case with fortinet just now) if any of you have noticed something similar recently.I have a very low but increasing number of users that start up their laptops in the morning and the F

AAherwarNew Member

Syslog messages not transmitted despite healthy daemon counters and correct routing — FortiGate-101F HA A-A cluster (ha-direct enabled)

Product: FortiGate-101FFortiOS Version: 7.6.6, build 3652HA Mode: Active-Active (A-A), ha-direct enabledCluster Members: Primary / SecondaryCluster Status: Healthy, in-sync, uptime 86+ daysSyslog traffic configured under config log syslogd setting i

171

G

gabrielcaitanoestudanteNew Member

Question about Access Port Configuration on FortiGate

Hi everyone,I'm just starting my journey with Fortinet and studying for the NSE4, so I'm still learning how some concepts differ from Cisco.I have a quick question:Is there a way to configure a physical interface as an access port, similar to Cisco s

janneman123Visitor II

dialup vpn connected through a site 2 site vpn

What am i missing with the configuration:I get the dialup VPN to connect(i.e i am connecting from the PC at port 5 and using 10.10.0.1 as my gateway in forticlient, and i can see that it assigns the correct VPN according to my mode cfg, but when i i

FabrichoundNew Member

FortiAP "Connected Via" on GUI issue

Hi allI have noticed a weird issue, client had a power outage over the weekend as the redid the server room UPS.Now my AP’s show “Connected VIA” my VOIP interface on the FortiGate, even tough they are connected via FortiSwitches and the LLDP Neighbor

LDV1New Member

FCRemove.exe for FortiClient v7.4.5

A couple days ago, I helped one of my clients with installing the FortiClient v7.4.5 on his computer using the FortiClientSetup_7.4.5_x64.exe file. But after the setup process was completed, we noticed that the domain name was not correct; it was sho

Ammar387New Member

Incident Events Not Displayed in Incident Details or Exported Reports

Hi everyone,I'm experiencing an issue in our FortiSIEM environment and would appreciate any suggestions or guidance.Issue DescriptionWhen navigating to Incidents → List and opening any incident, the Events tab does not display any associated event de

111

14 hours ago

Ammar387New Member

FortiSIEM

Logs Received by Collector but Not Available in Analytics or Log View

I’m experiencing an issue in FortiSIEM environment where devices are successfully communicating with the collector, but their logs are not available for analysis.Issue DescriptionThe affected devices are present in the CMDB. When expanding the device

403

ismailurek2New Member

IPsec dialup split DNS (internal-domain-list) ignored on FortiOS 7.6.7

Hi,FortiGate 7.6.7, IKEv2 dialup with EAP, mode-cfg and IPv4 split tunnel enabled. internal-domain-list is configured, but split DNS never takes effect: every DNS query from the client reaches the FortiGate, not only the two internal domains.config v

kima_25New Member

Cluster FW (A/P) without using vMAC

Hello,If we need to deploy a cluster of two FortiGate firewalls as VMs without using the virtual MAC (vMAC), and instead use the hypervisor-assigned MAC address of each firewall interface, I would like to confirm whether this type of cluster configur

342

assiah10New Member

Forticlient ZTNA / Clients lose affiliation with EMS

Hi,I would like to just ask around (not going to open an official case with fortinet just now) if any of you have noticed something similar recently.I have a very low but increasing number of users that start up their laptops in the morning and the F

AAherwarNew Member

Syslog messages not transmitted despite healthy daemon counters and correct routing — FortiGate-101F HA A-A cluster (ha-direct enabled)

Product: FortiGate-101FFortiOS Version: 7.6.6, build 3652HA Mode: Active-Active (A-A), ha-direct enabledCluster Members: Primary / SecondaryCluster Status: Healthy, in-sync, uptime 86+ daysSyslog traffic configured under config log syslogd setting i

171

Technical Tip: Configuring Client Certificate Forwarding on FortiADC to Forward multiple User certificates

yitoo_FTNTStaff

FortiWeb

DescriptionThis article describes how to configure client certificate forwarding on FortiADC for Layer 7 virtual servers.ScopeFortiADC.SolutionTo verify each user with a different client certificate using 'Client Certificate Forward' in ClientSSLProf

80

Troubleshooting Tip: Unable to view the matching firewall policy from traffic logs after device migration

awasfi_FTNTStaff

FortiManager

DescriptionThis article explains how to resolve an issue where FortiManager cannot open the firewall policy associated with a traffic log after migrating from one FortiGate model to another.When selecting View Policy from a traffic log (see Viewing p

Jaye17Staff

Troubleshooting Tip: Error occurs when creating a super_admin with two-factor authentication

DescriptionThis article describes an issue encountered when creating super_admin accounts with two-factor authentication.ScopeFortiOS v7.6.6.SolutionWhen creating a 'super_admin' account and applying two-factor authentication using FortiToken, an err

Jaye17Staff

Troubleshooting Tip: FortiAI Assist not working with the error 'Something went wrong while generating the response'

DescriptionThis article describes the error 'Something went wrong while generating the response' seen when submitting queries to FortiAI.ScopeFortiOS v8.0.0.SolutionFortiAI-Assist is embedded in FortiOS, and FortiOS includes the FortiAI assistant and

770

J

Troubleshooting Tip: Traffic dropped for 'SNAT mismatch policy'

zromanoStaff & Editor

FortiGate

DescriptionThis article describes a possible reason why the FortiGate is dropping packets with the error 'SNAT mismatch policy'.ScopeFortiGate.SolutionIn a scenario where traffic (the same packet) needs to be handled twice by the FortiGate, the first

750

Troubleshooting Tip: Unable to import web filter from FortiClient EMS v7.4.5 to FortiGate v7.6.6 or above

Hua_Staff

FortiClient

DescriptionThis article describes how to import a web filter from FortiGate.ScopeFortiClient EMS v7.2 and v7.4 onwards.SolutionConfirm the current FortiGate version. If the version is v7.6.4 or later, API key authentication is required.The API key au

680

Technical Tip: How to solve HA out of sync due to Fortinet_Sub_CA_Backup

vifiStaff

FortiGate

DescriptionThis article describes the issue when HA is out of sync due to Fortinet_Sub_CA_Backup.ScopeFortiGate 700G.SolutionWhen adding VDOMs in an HA cluster, HA goes out of sync due to vpn.certificate.ca.Fortinet_Sub_CA_Backup certificate is prese

160

Technical Tip: How to configure proxy for FortiSOAR agent node

jhimanshuStaff

FortiSOAR

DescriptionThis article describes the steps to configure a proxy on the FortiSOAR agent node.Scope FortiSOAR Agent.SolutionInsert the following proxy server details into the /etc/environment file:http_proxy="http://ProxyServerURL/IP:Server_Port" http

130

Technical Tip: Understanding the difference between fnTrapLogDiskThreshold SNMP traps and logdisk-high event logs

bkashavaStaff

FortiWeb

DescriptionThis article explains the difference between the 'fnTrapLogDiskThreshold' SNMP trap and the 'logdisk-high' Event Log in FortiWeb.ScopeFortiWeb.SolutionAn SNMP manager may receive the 'fnTrapLogDiskThreshold' notification indicating that lo

80

Technical Tip: Restrict access to '.env' files using FortiWeb

bkashavaStaff

FortiWeb

DescriptionThis article describes how to restrict access to '.env' files using FortiWeb.ScopeFortiWeb.SolutionThe '.env' file commonly stores sensitive application configuration information, such as database credentials, API keys, and other environme

130