Welcome to the Fortinet Community!

MS-ISAC Threat STIX/TAXII Threat Feeds

I was curious if anyone was already ingesting the Malicious IP and/or Domain Lists from their MS-ISAC membership? Someone asked in another community thread if those were included in the Fortigate threat feeds somewhere, but didn't get a response. I

371

T

57 minutes ago

P

pd_ukNew Member

EMS-Managed FortiClient Sends EAP NAK on IKEv2 EAP-SAML IPsec VPN — Non-EMS Client Works

ENVIRONMENTFortiOS: 7.6.x (FortiGate 120G)FortiClient EMS: 7.4.x (FortiCloud SaaS)FortiClient: 7.4.7 (Windows)Authentication: IKEv2 EAP-SAML via Microsoft Entra ID---ISSUEFortiClient endpoints managed by EMS fail to complete IKEv2 IPsec VPN tunnel es

221bbakerNew Member

How to redirect all internally generated DNS to a pool of public DNS servers

Many internal systems are querying public DNS servers, but it’ll probably take a year before we can address off of these. Consequently, we are investigating if it’s possible to NAT all outbound queries to a pool of 4 different public DNS servers and

Anonymous_UserNew Contributor III

Customer Service

Customer Service Note: Email interaction when working tickets with Fortinet Support

Description   This article describes a feature deployed in January 2019.The 'Email Interaction' feature allows the choice of whether ticket updates can be handled via email.  This avoids the need to log into the Support Portal to read the

5355932

heitorlouExplorer

FortiAnalyzer Remote Logs Not Displaying on FortiGate GUI After FortiAnalyzer Upgrade (FAZ 7.4.11)

ScenarioEnvironment with multiple FortiGate firewalls connected to a FortiAnalyzer VM for centralized log collection and analysis.Environment VersionsFortiAnalyzer VM: 7.4.11FortiGate: 7.2.13Fabric ADOM enabledSome FortiGate devices operating in HA c

willy007Visitor III

FortiGate VM cannot retrieve FortiManager serial number – FMG 7.6.6

Hello everyone,I am currently experiencing an issue integrating a FortiGate VM with a FortiManager VM (version 7.6.6).When trying to authorize the FortiManager from the FortiGate GUI, I receive the following error:"Could not connect to the FortiManag

1476

drinkerNew Member

Bad certificate from Fortinet

My two favourite pubs are both owned by the Greene King chain. There is no cellular signal at either of them so I like to use their free wi-fi. Everything works as expected on a public wi-fi except when I browse one particular site I get a warning th

muneesNew Member

ddns not working after static isp ip update

Static ip update on ISP then Fortidydns is not working

nkuhl30New Member

FortiNAC - New SSL/RADIUS Certificate Lifetimes

What is everyone's plan for replacing SSL/RADIUS certs moving forward since certificate lifetimes are decreasing drastically over the next few years? Does FortiNAC have any plans to allow for automatic renewals? Once 2029 comes and the expiry is 45 d

3071

3 hours ago

sbrooks1Staff

Troubleshooting Tip: Syslogd override setting not taking affect with ha-direct enabled

DescriptionThis article describes an issue where syslogd override settings are not taking affect and possible workarounds after upgradeScopeFortiGate v7.0/7.2.SolutionOn FortiGate versions prior to 7.0.13 and 7.2.4, there is a known issue where syslo

pd_ukNew Member

EMS-Managed FortiClient Sends EAP NAK on IKEv2 EAP-SAML IPsec VPN — Non-EMS Client Works

ENVIRONMENTFortiOS: 7.6.x (FortiGate 120G)FortiClient EMS: 7.4.x (FortiCloud SaaS)FortiClient: 7.4.7 (Windows)Authentication: IKEv2 EAP-SAML via Microsoft Entra ID---ISSUEFortiClient endpoints managed by EMS fail to complete IKEv2 IPsec VPN tunnel es

221bbakerNew Member

How to redirect all internally generated DNS to a pool of public DNS servers

Many internal systems are querying public DNS servers, but it’ll probably take a year before we can address off of these. Consequently, we are investigating if it’s possible to NAT all outbound queries to a pool of 4 different public DNS servers and

heitorlouExplorer

FortiAnalyzer Remote Logs Not Displaying on FortiGate GUI After FortiAnalyzer Upgrade (FAZ 7.4.11)

ScenarioEnvironment with multiple FortiGate firewalls connected to a FortiAnalyzer VM for centralized log collection and analysis.Environment VersionsFortiAnalyzer VM: 7.4.11FortiGate: 7.2.13Fabric ADOM enabledSome FortiGate devices operating in HA c

willy007Visitor III

FortiGate VM cannot retrieve FortiManager serial number – FMG 7.6.6

Hello everyone,I am currently experiencing an issue integrating a FortiGate VM with a FortiManager VM (version 7.6.6).When trying to authorize the FortiManager from the FortiGate GUI, I receive the following error:"Could not connect to the FortiManag

1476

drinkerNew Member

Bad certificate from Fortinet

My two favourite pubs are both owned by the Greene King chain. There is no cellular signal at either of them so I like to use their free wi-fi. Everything works as expected on a public wi-fi except when I browse one particular site I get a warning th

muneesNew Member

ddns not working after static isp ip update

Static ip update on ISP then Fortidydns is not working

nkuhl30New Member

FortiNAC - New SSL/RADIUS Certificate Lifetimes

What is everyone's plan for replacing SSL/RADIUS certs moving forward since certificate lifetimes are decreasing drastically over the next few years? Does FortiNAC have any plans to allow for automatic renewals? Once 2029 comes and the expiry is 45 d

3071

3 hours ago

TiboNew Member

FortiMail: Recipient verification exception?

Hello FortiPeople, I’m checking if there’s a possibility to create a “recipient verification” exception for a particular source IP address. Let me explain:We have a particular client application, which sends e-mails to multiple addresses in one SMTP

70

6 hours ago

peterk2020Visitor III

Using Fortigate as a DNS server for users.

Here is what I want to achieve with using Fortigate as a DNS server for all remote locations.For internal users, using Fortigate interface IP as a DNS server. Fortigate will forward any public domain name queries to system DNS servers while any inte

Raju_kNew Member

FortiMail best practices with a Bulk email service provider?

Hey everyone,We’re reviewing our outbound mail flow with FortiMail and wanted to ask if anyone here is using a Bulk email service provider alongside Fortinet infrastructure for newsletters or transactional email delivery.I’ve been testing a few servi

232

6 hours ago

A

Anonymous_UserNew Contributor III

Customer Service

Customer Service Note: Email interaction when working tickets with Fortinet Support

Description   This article describes a feature deployed in January 2019.The 'Email Interaction' feature allows the choice of whether ticket updates can be handled via email.  This avoids the need to log into the Support Portal to read the

5355932

sbrooks1Staff

Troubleshooting Tip: Syslogd override setting not taking affect with ha-direct enabled

DescriptionThis article describes an issue where syslogd override settings are not taking affect and possible workarounds after upgradeScopeFortiGate v7.0/7.2.SolutionOn FortiGate versions prior to 7.0.13 and 7.2.4, there is a known issue where syslo

70

3 hours ago

dbuStaff

FortiNAC-F

Troubleshooting Tip: How to verify if FortiNAC is sending syslogs to external Log Receivers

DescriptionThis article describes how to verify if FortiNAC is sending Syslogs to an external Log Receiver.ScopeFortiNAC.SolutionThe following is an example of configuration for FortiAnalyzer as a Log Receiver. The 'Status' column shows as 'empty' in

30

4 hours ago

sjanssensStaff

Troubleshooting Tip: Double reboot on NP7 devices on upgrade to 7.6.5+ due to default_qos_type / vlan-lookup-cache

DescriptionThis article describes double reboot behavior on NP7 devices after an upgrade to version 7.6.5 or above, triggered by the default_qos_type config and/or vlan-lookup-cache config.ScopeNP7 FortiGate devices upon upgrading to 7.6.5 or higher.

120

5 hours ago

bkrempelStaff

FortiClient

Technical Tip: How to enable EAP-TTLS in FortiClient standalone version for VPN IPsec dial-up

DescriptionThis article describes the configuration required for IPsec dial-up on a Standalone FortiClient to work with LDAP users.ScopeFortiClient Standalone Version 7.4.7.SolutionTo use LDAP authentication with IKEv2 on an IPsec VPN: on the FortiCl

130

5 hours ago

EhanssenStaff

Technical Tip: Maximum web proxy user limit used up by wad-source-affinity

DescriptionThis article describes Web proxy user limitations when a WAD source affinity is used.ScopeAll FortiGate versions since v7.0.SolutionWhen this limitation is reached, the block page shows 'The maximum web proxy user limit has been reached'.B

100

6 hours ago

Ahmed_GalalStaff

FortiWeb

Technical Tip: FortiWeb RADIUS login issue with FortiAuthenticator

DescriptionThis article describes a technical issue where the FortiWeb device does not show the token window after entering the username and password when using RADIUS authentication with a FortiAuthenticator. The user is unable to log in due to the

80

10 hours ago

alyaStaff

FortiMail

Technical Tip: How to reject an email and send a copy to BCC recipient

DescriptionThis article describes how to configure FortiMail to reject an email while simultaneously sending a copy of the message to a BCC recipient for monitoring or auditing purposes.ScopeFortiMail.SolutionIn some environments, administrators may

80

10 hours ago

lkumarStaff

FortiAuthenticator

Troubleshooting Tip: Importing users from LDAP server by group membership shows stale user accounts info

DescriptionThis article describes the steps to troubleshoot stale user account information during user import from LDAP to FortiAuthenticator. The user is experiencing slow performance when importing users from LDAP, and the changes made in the LDAP

80

11 hours ago

tino_pStaff