Welcome to the Fortinet Community!

Domain was blocked by dns botnet C&C

Is anyone else seeing a large amount of “Domain was blocked by DNS botnet C&C” alerts for valid URLS?the commonality is that its akamai and the common 5 IP addresses are the following.23.223.209.3223.33.44.22823.44.201.23423.57.90.6823.33.40.7

704

1 hour ago

Pratik2023New Member

Unable to Add FortiGate Evolution License on FortiGate VM (FFW_VM64_KVM-v8.0.0) Installed in EVE-NG

Hi everyone,I have installed the following FortiGate VM image in EVE-NG:Image: FFW_VM64_KVM-v8.0.0.F-build0167-FORTINET.out.kvmAfter booting the VM, I don't see any option to add or upload an Evolution License during the initial setup.When I click Ca

543

4 hours ago

Mattmans1New Member

ADVPN - Dual WAN connectivity on spokes

Hi all, This is my first post on these forums, so hello to everybody :) I'm going to start by asking a question i don't expect many people to be able to answer but i hope somebody who is familiar with BGP and ADVPN can crack this one. 

508664

5 hours ago

KasparsBCommunity Manager

Fortinet Community Experience

Your feedback drives change, make your voice count

Every question you ask, answer you share, and piece of feedback you give helps shape the Fortinet Community experience for everyone else. That’s why we’re always listening. Feedback isn’t just about fixing what’s not working, it’s how we discover wha

200

7 hours ago

M

MustaphaJAMALNew Member

VPN IPSec macOS Route Issue

Hi everyone, I'm experiencing a strange issue with an IPsec Dial-up VPN after migrating users from SSL VPN. The environment is FortiGate 400F with FortiClient VPN 7.4.3.4323 on macOS Sonoma 14.1. The problem only affects macOS clients; Windows clien

263

Technical Tip: Disabling the installation of the Fortinet Privileged Access Agent browser extension when installing FortiClient

adriellousadaStaff

FortiClient

DescriptionThis article describes how to disable the installation of the Fortinet Privileged Access Agent browser extension when installing FortiClient.ScopeFortiClient, FortiClient EMS.SolutionWhen installing FortiClient on computers, if the install

nbctcpNew Member

I am using console server to connect to all my network gears such as Aruba, Cisco, FortiAll Aruba can use micro usb console  and some usb-cAll new Cisco can use mini usb console and some usb-cFew Forti can use mini usb console Ser

968585

rarino5New Member

Fortigate 400F vs 200G

Hi!I have to renew or replace a Fortigate 400F cluster, that is working as ISFW.Looking at the specs, the 200G seems to outperform the 400F while being cheaper (more RAM, higher NGFW-throughput.Did I miss anything, or would you prefer to take a pair

342

K

KentCunnectNew Member

Can't connect with fortinet 7.2 managed with EMS and SAML on linux

I enrolled my forticlient with the EMS, it shows “connected”.When I try to connect to the VPN (SAML Login), it’s stuck “connecting”.Two problems come to mind:* It doesn’t show the SAML popup (auth through azure) as it does on windows.* when looking a

gcortes1Staff

Troubleshooting Tip: Resolving the FortiSandbox error 'Firmware upgrade Failed: Failed to fetch checksum for image.'

DescriptionThis article describes the steps and recommendations to prevent the error 'Firmware upgrade Failed: Failed to fetch checksum for image' when updating a FortiSandbox.The errors in the GUI may be similar to the following:The Errors in Logs &

90

Epitaph91New Member

Domain was blocked by dns botnet C&C

Is anyone else seeing a large amount of “Domain was blocked by DNS botnet C&C” alerts for valid URLS?the commonality is that its akamai and the common 5 IP addresses are the following.23.223.209.3223.33.44.22823.44.201.23423.57.90.6823.33.40.7

704

1 hour ago

KasparsBCommunity Manager

Fortinet Community Experience

Your feedback drives change, make your voice count

Every question you ask, answer you share, and piece of feedback you give helps shape the Fortinet Community experience for everyone else. That’s why we’re always listening. Feedback isn’t just about fixing what’s not working, it’s how we discover wha

200

7 hours ago

M

MustaphaJAMALNew Member

VPN IPSec macOS Route Issue

Hi everyone, I'm experiencing a strange issue with an IPsec Dial-up VPN after migrating users from SSL VPN. The environment is FortiGate 400F with FortiClient VPN 7.4.3.4323 on macOS Sonoma 14.1. The problem only affects macOS clients; Windows clien

263

rarino5New Member

Fortigate 400F vs 200G

Hi!I have to renew or replace a Fortigate 400F cluster, that is working as ISFW.Looking at the specs, the 200G seems to outperform the 400F while being cheaper (more RAM, higher NGFW-throughput.Did I miss anything, or would you prefer to take a pair

342

K

KentCunnectNew Member

Can't connect with fortinet 7.2 managed with EMS and SAML on linux

I enrolled my forticlient with the EMS, it shows “connected”.When I try to connect to the VPN (SAML Login), it’s stuck “connecting”.Two problems come to mind:* It doesn’t show the SAML popup (auth through azure) as it does on windows.* when looking a

Anthony2New Member

I havinf issues with both Hub loops when ping from Spoke for FortiOS 7.6.6

Hello Team I have configured ADVPN 2.0 between two 120G, BGP is up, i can ping both tunnels, but the issues are that i can ping the Hub loopback from the Spoke but unable the Hub loopback from the Spoke

212

MandalorianExplorer III

Manual configuration on FortiClient (VPN Only) for MacOS: Can it be done ?

Hi everyone,I wanted to know if it's possible to manually edit these parameters on the unlicenced FortiClient (VPN Only) version for MacOS ?See the image below: In particular, I need to be sure whether the <eap_method>2</eap_method> para

HS08Visitor III

Why link status for each port is different between the device and fortinac? On the device port g1/0/27 - 31 is up but in the NAC is different

HS08Visitor III

Can we identify how many users is active and authenticated to fortinac?

161

11 hours ago

M

Moe_yaya2002New Member

cisco ISE captive portal authentication with fortigate

Hello everyone,I'm currently trying to integrate Cisco ISE with a FortiGate firewall for Captive Portal authentication, and I'm running into a couple of issues.FortiGate Network Device Profile In Cisco ISE, I cannot find a FortiGate Network Device Pr

adriellousadaStaff

Technical Tip: Disabling the installation of the Fortinet Privileged Access Agent browser extension when installing FortiClient

DescriptionThis article describes how to disable the installation of the Fortinet Privileged Access Agent browser extension when installing FortiClient.ScopeFortiClient, FortiClient EMS.SolutionWhen installing FortiClient on computers, if the install

110

Troubleshooting Tip: Resolving the FortiSandbox error 'Firmware upgrade Failed: Failed to fetch checksum for image.'

gcortes1Staff

FortiSandbox

DescriptionThis article describes the steps and recommendations to prevent the error 'Firmware upgrade Failed: Failed to fetch checksum for image' when updating a FortiSandbox.The errors in the GUI may be similar to the following:The Errors in Logs &

90

Troubleshooting Tip: Troubleshooting FortiGate embedded Issues with FortiSwitch

zendodgStaff

FortiSwitch

DescriptionThis article describes the steps to troubleshoot FortiNAC issues with FortiSwitch. The issue is that FortiNAC does not work as expected, and this article provides a comprehensive solution to identify and resolve the root cause of the issue

70

Technical Tip: Why it is not possible to rename a FortiSwitch in a Multi-Tenancy Environment

zendodgStaff

FortiSwitch

DescriptionThis article describes why it is not possible to rename a FortiSwitch in a 'Multi-Tenancy' environment.ScopeFortiGate, FortiSwitch, FortiOS v7.4.x and above.Solution'Multi-Tenancy' refers to the process of exporting FortiSwitch ports from

40