Welcome to the Fortinet Community!

Forticlient information and some Tag don't syn from ems to Fortigate

upgraded my forticlient ems from 7.2.14 to 7.4.7 then 7.4.8 . upgrade was fine. have noticed some forticlient infomation no longer appears on fortigate yet it was therein 7.2.14. e.g version and owner are blank on fortigate yet populated on ems. how

122

L

20 minutes ago

N

NicolasNNew Member

Fortinet certificate issue when trying to access our portal

Hello,Our client used to be able to connect to our website but is now blocked since the end of July.The error:Fortinet" wasn't installed properly on your computer or the network. Ask your IT administrator to resolve this issue.NET::ERR_CERT_AUTHORITY

131

27 minutes ago

SteveRStaff

FortiADC

Troubleshooting Tip: FortiADC health checks may not work after an upgrade to v8.0 when using NTLM-authenticated health checks

DescriptionThis article describes an issue that may arise following an upgrade of the FortiADC OS to v8.0.0 - v8.0.3 where health checks to real servers are not sent and consequently the health check fails.ScopeFortiADC running version 8.0.0 - 8.0.3.

30

31 minutes ago

M

mlaforge14207New Member

IP Pool and the outside interface IP

Hello - We are in the process of migrating from Cisco firewalls to Fortinet. We support a large medical system with 3 hospitals and many clinics. We have several NATs where certain subnets exit the firewall with specific external IP addresses ba

111

38 minutes ago

A

Aditya2745New Member

FortiSIEM 7.4.0 to 7.5.1 (HA) Migration – Historical Events and Logs

Hi,I am working on a new FortiSIEM deployment and need to migrate the complete data and configuration from an existing FortiSIEM environment.The existing FortiSIEM is currently running FortiSIEM 7.4.0 in an All-in-One Supervisor deployment and has ap

70

HS08Contributor III

I onboard my WLC to fnac and my WLC contains 5 SSID, let say SSID1 until SSID5.SSID1 to SSID4 using WPA-PSK and SSID5 is 802.1x enabled. With this scenario there is no authentication request from WLC to the NAC If the client connect from one from SSI

581

50 minutes ago

SheikhStaff

Troubleshooting Tip: Cisco IP phones become unregistered and lose reachability under MAB because the voice VLAN is returned untagged

DescriptionThis article explains a scenario where Cisco IP phones authorized by FortiNAC via MAB lose reachability and become unregistered whenever the switch PoE port is reset (phone reboot) or the phone is unplugged and reconnected, while data endp

150

1 hour ago

pjangStaff & Editor

Technical Tip: FortiGate unable to access several FortiGuard services due to CRL scope errors (September 2026)

DescriptionThis article provides information on a recent issue (reported 2026-09-09) where FortiGates are unable to access several FortiGuard services that utilize certificates signed by DigiCert High Assurance EV Root CA.ScopeFortiGate, FortiProxy,

265583

SheikhStaff

Troubleshooting Tip: Wi-Fi 802.1X EAP-TLS machine authentication fails with EAP error 0x80090016 (NTE_BAD_KEYSET) and the host is seen as MAB

DescriptionThis article explains a scenario in FortiNAC / FortiNAC-F where a single domain-joined host fails 802.1X EAP-TLS Wi-Fi machine authentication with the Windows EAP error 0x80090016, while its wired connection and other hosts at the same sit

40

saneeshpv_FTNTStaff

Troubleshooting Tip: How to fix the error 'CPU count of the new contract does not match with the existing one. Contract cannot be registered.' when trying to register a FortiGate-VM 16 vCPU license on a FortiGate-VM 8vCPU S-series appliance

DescriptionThis article describes how to fix the error 'CPU count of the new contract does not match with the existing one. Contract cannot be registered.' while registering the new license for FortiGate VM from 8 vCPU to 16 vCPU on FortiCare Portal.

30

moseizVisitor III

Forticlient information and some Tag don't syn from ems to Fortigate

upgraded my forticlient ems from 7.2.14 to 7.4.7 then 7.4.8 . upgrade was fine. have noticed some forticlient infomation no longer appears on fortigate yet it was therein 7.2.14. e.g version and owner are blank on fortigate yet populated on ems. how

122

NicolasNNew Member

Fortinet certificate issue when trying to access our portal

Hello,Our client used to be able to connect to our website but is now blocked since the end of July.The error:Fortinet" wasn't installed properly on your computer or the network. Ask your IT administrator to resolve this issue.NET::ERR_CERT_AUTHORITY

131

27 minutes ago

M

mlaforge14207New Member

IP Pool and the outside interface IP

Hello - We are in the process of migrating from Cisco firewalls to Fortinet. We support a large medical system with 3 hospitals and many clinics. We have several NATs where certain subnets exit the firewall with specific external IP addresses ba

111

38 minutes ago

A

Aditya2745New Member

FortiSIEM 7.4.0 to 7.5.1 (HA) Migration – Historical Events and Logs

Hi,I am working on a new FortiSIEM deployment and need to migrate the complete data and configuration from an existing FortiSIEM environment.The existing FortiSIEM is currently running FortiSIEM 7.4.0 in an All-in-One Supervisor deployment and has ap

70

HS08Contributor III

I onboard my WLC to fnac and my WLC contains 5 SSID, let say SSID1 until SSID5.SSID1 to SSID4 using WPA-PSK and SSID5 is 802.1x enabled. With this scenario there is no authentication request from WLC to the NAC If the client connect from one from SSI

581

50 minutes ago

Alby23New Member

MTBF (Mean Time Between Failure) of FortiGate models

Hi all,does anyone know if the MTBF info is public available? Thanks in advance

133742

N

reid88New Member

Apple devices disappears

What would cause apple devices running ARD to disappear in network list when there are more devices connected and reappears when there are less devices? This is a FortiAPs/FortiSwitches environment.

80

T

ttefesoNew Member

how to create a template for new SSID forti management cloud

Hi together,I want to create a new SSID using Forti Management Cloud.I go to configuration/SSID (Beta)/ create new. Then I am asked to select a Template but the list is empty.Where can I create a template for that purpose?Thanks in Advance

120

jeffPhil01New Member

FortiGate-VM: local-in traffic from VTI tunnel silently dropped (fw_local_in_handler, policy 0) — everything else works

Environment2x FortiGate-VM64-KVM, v8.0.0, build0167 (GA.F) License Status: Invalid (permanent-trial / unlicensed mode — not a normal 15-day FortiCloud eval) Lab topology: two sites connected via two independent ISP paths, each carrying one IPsec VTI

894

J

5 hours ago

arw357New Member

forticlient for linux - invalid option -- 'P'

I've just installed  FortiClient VPN  the .deb package from here https://www.fortinet.com/support/product-downloads .installed with `sudo dpkg -i ...` Setupd the configuration ( as I have on my windows pc and on my android ) 

99779

H

5 hours ago

SteveRStaff

FortiADC

Troubleshooting Tip: FortiADC health checks may not work after an upgrade to v8.0 when using NTLM-authenticated health checks

DescriptionThis article describes an issue that may arise following an upgrade of the FortiADC OS to v8.0.0 - v8.0.3 where health checks to real servers are not sent and consequently the health check fails.ScopeFortiADC running version 8.0.0 - 8.0.3.

30

31 minutes ago

SheikhStaff

Troubleshooting Tip: Cisco IP phones become unregistered and lose reachability under MAB because the voice VLAN is returned untagged

DescriptionThis article explains a scenario where Cisco IP phones authorized by FortiNAC via MAB lose reachability and become unregistered whenever the switch PoE port is reset (phone reboot) or the phone is unplugged and reconnected, while data endp

150

1 hour ago

pjangStaff & Editor

Technical Tip: FortiGate unable to access several FortiGuard services due to CRL scope errors (September 2026)

DescriptionThis article provides information on a recent issue (reported 2026-09-09) where FortiGates are unable to access several FortiGuard services that utilize certificates signed by DigiCert High Assurance EV Root CA.ScopeFortiGate, FortiProxy,

265583

SheikhStaff

Troubleshooting Tip: Wi-Fi 802.1X EAP-TLS machine authentication fails with EAP error 0x80090016 (NTE_BAD_KEYSET) and the host is seen as MAB

DescriptionThis article explains a scenario in FortiNAC / FortiNAC-F where a single domain-joined host fails 802.1X EAP-TLS Wi-Fi machine authentication with the Windows EAP error 0x80090016, while its wired connection and other hosts at the same sit

40

saneeshpv_FTNTStaff

Troubleshooting Tip: How to fix the error 'CPU count of the new contract does not match with the existing one. Contract cannot be registered.' when trying to register a FortiGate-VM 16 vCPU license on a FortiGate-VM 8vCPU S-series appliance

DescriptionThis article describes how to fix the error 'CPU count of the new contract does not match with the existing one. Contract cannot be registered.' while registering the new license for FortiGate VM from 8 vCPU to 16 vCPU on FortiCare Portal.

30

Ade_23Staff

Technical Tip: Setting up a user-based NAC policy using SAML outbound authentication (with Microsoft Entra ID)

Description This article describes how to use SAML outbound authentication for a user-based NAC policy to assign client devices to a VLAN on a FortiGate managing FortiSwitches. Scope FortiOS 6.4 and above. Solution There are existing articles

29081

M

SheikhStaff

Troubleshooting Tip: Identifying when a host does not match a User/Host Profile because AD group membership is via the Primary Group

DescriptionThis article explains a behavior in FortiNAC-F v7.6.x where a host successfully completes 802.1X machine authentication but is not assigned any Network Access Policy, because the User/Host Profile matches on a synchronized AD security grou

140

Troubleshooting Tip: FortiWeb returns HTTP 500 when an encrypted cookie fails decryption

srajeswaranStaff

FortiWeb

DescriptionThis article describes how to identify a Cookie Security decryption failure when FortiWeb returns an HTTP 500 response for a request containing an invalid encrypted cookie.ScopeFortiWeb.SolutionWhen Cookie Security is configured with Secur

70

akileshcStaff