Welcome to the Fortinet Community!

IPv6 Best Security Practices for Beginner

How to Protect Fortigate from IPv6 Security Risks

192

mumbles202New Member

Redundant VPNs between a pair of FGTs

Working on a branch office to HQ redundant vpn setup. Each location has 2 ISPs and I had planned on following this: Manual redundant VPN configuration | FortiGate / FortiOS 8.0.0 | Fortinet Document Library just using 2 tunnels (primary ISP to prima

281

kyoneda1Staff

Technical Tip: Introduction of Server Certificate Verification for Virtual Server and ZTNA Access Proxy

Description This article describes the addition of a server certificate verification capability for Virtual Server and ZTNA Access Proxy in FortiOS. Scope FortiOS. Solution Starting in FortiOS v7.4.9 and v7.6.3, FortiGate introduces a new cap

3551

12 hours ago

pawelsExplorer

How to download FortiAnalyzer clickhouse schema file

Where I can find click house schema file for FortiAnalyzer ?According to docs.fortinet.com:Each log table stored in an SQL database contains log fields that can be used in datasets.You can view a full list of the fields available for each log type in

91

15 hours ago

Umer221Staff

Technical Tip: How to determine the web filter category of a website or domain

Description This article describes how to identify the web filter category of a website or domain. This step is crucial for effectively utilizing the web filter feature in FortiGate. Scope FortiOS, FortiGate, Web Filter, FortiGuard. Solution

322101

16 hours ago

luisjoNew Member

False Positive SPF Detections in FortiMail 8.0.0

Good day, everyone.I have been experiencing intermittent SPF false positives in **FortiMail 8.0.0**. In some cases, FortiMail reports that the sender's domain does not have an SPF record. However, after verifying the domain manually using both our in

211

16 hours ago

FFTNew Member

FortiSIEM

Fortisiem integration with reporting tool

Can Fortisiem be integrated with PowerBI for reporting? if yes, how? or which reporting tool can be integrated with Fortisiem?

10222

D

17 hours ago

Solutions79New Member

FGT-50E with FAP 221E on 6.0.x, to be migrated to a FGT-50G

Hello dear community, I got a new customer that has an unlicensed FortiGate 50E and FortiAPs 221E on firmware 6.0.x. They want to replace the FortiGate with the 50G model but want to keep the APs for now. The target FortiOS for 50G would be 7.4.12. A

654

17 hours ago

ahmadking22Explorer II

Forti OS 7.4.12 – Is it possible to completely disable local Alert/Error/Critical logs?

Hello everyone,I am using a FortiGate 40F running FortiOS 7.4.12.I would like to know if there is any supported or unsupported method to prevent the FortiGate from saving Alert, Error, and Critical logs in the local memory.My goal is to stop these lo

393

18 hours ago

kyle-hsuanExplorer

migrate FAZ-400E to FAZ-1000G

Hi I tried migrating the FAZ-400E config to a FAZ-1000G, but after rebooting, the configuration wasn't applied.but migrating the same config to a FAZ-VM works without any issues.(OS versions are identical).

JasonXXVisitor II

IPv6 Best Security Practices for Beginner

How to Protect Fortigate from IPv6 Security Risks

192

mumbles202New Member

Redundant VPNs between a pair of FGTs

Working on a branch office to HQ redundant vpn setup. Each location has 2 ISPs and I had planned on following this: Manual redundant VPN configuration | FortiGate / FortiOS 8.0.0 | Fortinet Document Library just using 2 tunnels (primary ISP to prima

281

pawelsExplorer

How to download FortiAnalyzer clickhouse schema file

Where I can find click house schema file for FortiAnalyzer ?According to docs.fortinet.com:Each log table stored in an SQL database contains log fields that can be used in datasets.You can view a full list of the fields available for each log type in

91

15 hours ago

luisjoNew Member

False Positive SPF Detections in FortiMail 8.0.0

Good day, everyone.I have been experiencing intermittent SPF false positives in **FortiMail 8.0.0**. In some cases, FortiMail reports that the sender's domain does not have an SPF record. However, after verifying the domain manually using both our in

211

16 hours ago

FFTNew Member

FortiSIEM

Fortisiem integration with reporting tool

Can Fortisiem be integrated with PowerBI for reporting? if yes, how? or which reporting tool can be integrated with Fortisiem?

10222

D

17 hours ago

ahmadking22Explorer II

Forti OS 7.4.12 – Is it possible to completely disable local Alert/Error/Critical logs?

Hello everyone,I am using a FortiGate 40F running FortiOS 7.4.12.I would like to know if there is any supported or unsupported method to prevent the FortiGate from saving Alert, Error, and Critical logs in the local memory.My goal is to stop these lo

393

18 hours ago

VDOM001Explorer

I can't change the HA's Device Priority.

Regarding a FortiGate system configured in an active/standby high-availability (HA) setup,we initially set the Device Priority value for Unit 1 to 200 and the Device Priority value for Unit 2 to 128 (the default).However, even though we hadn’t made a

794

19 hours ago

DanieleS99Explorer

Connection reset with FPAM web launching sessions

Hi,I recently implemented FPAM and I have a strange behavior with all the web launching sessions.The FPAM is in a subnet dedicated.My pc is on another subnet and the internal services and external(obviously) are on other subnets.In the middle there’s

785

21 hours ago

adem_netsysExplorer III

FortiSOAR community

FortiSIEM Data Ingest Issue

Hello Guys,I’m encountering two issues while trying to retrieve incidents from FortiSIEM. I’d appreciate your assistance with these matters.1. When ingesting data, even though I specify a count for “pull request” and “per page,” when I click “trigger

MuzaferNew Member

Renew trial license for Fortigate

How i renew or get a new FortiGate trial license in VmWorkstation that i launched before with my Forticare account and now expired ??

491

22 hours ago

kyoneda1Staff

Technical Tip: Introduction of Server Certificate Verification for Virtual Server and ZTNA Access Proxy

Description This article describes the addition of a server certificate verification capability for Virtual Server and ZTNA Access Proxy in FortiOS. Scope FortiOS. Solution Starting in FortiOS v7.4.9 and v7.6.3, FortiGate introduces a new cap

3551

12 hours ago

Umer221Staff

Technical Tip: How to determine the web filter category of a website or domain

Description This article describes how to identify the web filter category of a website or domain. This step is crucial for effectively utilizing the web filter feature in FortiGate. Scope FortiOS, FortiGate, Web Filter, FortiGuard. Solution

Jaye17Staff

Troubleshooting Tip: FortiGate HA not showing logs from FortiAnalyzer

DescriptionThis article describes the issue when FortiAnalyzer logs fail to load on FortiGate HA cluster after upgrading FortiAnalyzer to v7.4.11.ScopeFortiGate HA running v7.4.9, v7.4.11, v7.4.12.FortiAnalyzer v7.4.11.SolutionMatching criteria:Forti

omorenomartinStaff

Troubleshooting Tip: FortiManager's FortiProxy ADOM Upgrade Error 'Fail(errno=0):invalid value'

DescriptionThis article describes how to fix an issue where the user encounters the error message Fail(errno=0):invalid value during a FortiManager's FortiProxy ADOM (Administrative Domain) upgrade.Scope FortiManager.SolutionADOM upgrade can fail wit

90

22 hours ago

flunaibarraStaff

FortiSIEM

Technical Tip: OMI Kerberos authentication configuration

DescriptionThis article describes the requirements and configuration needed to integrate the OMI Kerberos authentication successfully.Scope FortiSIEM v7.5.0 and v7.5.1.SolutionPrerequisites:Active Directory Server is configured for Kerberos authentic

Troubleshooting Tip: How to unlock a user account after multiple wrong attempts through FortiClient login on FortiIdentity Cloud

DescriptionThis article describes how to unlock a user account after multiple wrong login attempts during the initial login through the invitation link that is used to log in through FortiClient. ScopeFortiIdentity Cloud (former FortiToken Cloud).Sol

60

pjangStaff & Editor

Technical Tip: How the domain name external feed entries behave when used in DNS Filtering

DescriptionThis article describes some expected behaviors and provides examples of how the FortiGate interprets entries within Domain Name External Feeds when used with DNS Filtering.ScopeFortiGate, DNS filtering, external feeds.SolutionAs a primer,

400

Technical Tip: FortiAP may go offline due to cwWtpd crash when IGMP snooping is enabled on SSIDs under high client density

acuetocasasStaff

FortiAP

DescriptionThis article describes an issue where FortiAP models FortiAP-431G, FortiAP-433G, and FortiAP-233G running firmware v7.6.5 or v8.0.0 may unexpectedly go offline when handling a high number of connected clients.The issue has been observed wh

80

akileshcStaff

Technical Tip: TCP MSS handling changes for IPsec tunnels beginning in FortiOS v7.6.1

DescriptionThis article describes the TCP Maximum Segment Size (TCP MSS) handling changes introduced for IPsec tunnels beginning in FortiOS 7.6.1 and their impact on Path MTU Discovery (PMTUD).Scope FortiOS v7.6.1 through FortiOS v8.0.0.SolutionBegin

520

Customer Service Note: Email interaction when working tickets with Fortinet Support

A

Anonymous_UserContributor

Customer Service

Description   This article describes a feature deployed in January 2019.The 'Email Interaction' feature allows the choice of whether ticket updates can be handled via email.  This avoids the need to log into the Support Portal to read the

5432113

A