Support Forum
- - Knowledge Base
Community Groups
Blogs

Create topic
Login

Welcome to the Fortinet Community!

75,390 Discussions
87,302 Replies
217,559 Members

Community Guidelines

Consult our Support Forum

Explore the Fortinet Knowledge Base

Ask questions and help others

Fortinet Documentation

FortiGuard Labs Outbreak Alerts

FortiGuard RSS Feeds

Product Life Cycle Information

Top Community Conversations

Recent activity
Unanswered
Recent KB Articles

G

glassfortressNew Member

Published in Support Forum

Webfilter blocks URLs inconsistently

I have a firewall rule which implements a web filter rule that allows only three domains and blocks all others. I also have an Application Filter which has Monitor action set for Firewall Browser and SSL applications. The firewall rule itself is set

538

G

21 minutes ago

bmartzNew Member

Published in Support Forum

Unable to peer in ipv6 with ISP AS number. Customer has their own ipv6 /48 block not supplied by isp

Customer has their own ipv6 /48 block not supplied by isp and I am unable to establish a neighbor relationship. ISP supplied link-local address as a Routing Object.

325

4 hours ago

johnathanStaff

published in FortiGate

Copilot is not usable after an upgrade to version 7.6.8 while the Explicit Proxy is in use

DescriptionAfter upgrading to version 7.6.8, when using the FortiGate as an Explicit Proxy with the default settings, chat messages for Copilot will be blocked.ScopeFortiOS version 7.6.8+.SolutionAfter upgrading to version 7.6.8, users who are trying

5102

9 hours ago

MauriceLeonVisitor III

Published in Support Forum

Install failure on 2 GB RAM FortiGates after FortiManager 7.6.8 upgrade – ssl-ssh-profile udp-not-quic

Hi all,after upgrading FortiManager to 7.6.8, all installs to our FortiGate-50G devices (FortiOS 7.6.7) fail. FortiManager pushes an attribute to the default profile “custom-deep-inspection” that the 50G does not support:config firewall ssl-ssh-profi

92110

A

12 hours ago

amalskyStaff

published in FortiGate

Technical Tip: Migrate SAML authentication from SSL VPN to dial-up IPsec IKEv2 while keeping SSL VPN in service

DescriptionThis article describes how to add SAML authentication to a dial-up IPsec IKEv2 remote-access VPN on a FortiGate that already runs SSL VPN with SAML, without modifying or interrupting the existing SSL VPN service.ScopeFortiOS v7.2, v7.4, v7

11911

B

13 hours ago

nnairStaff

published in FortiGate

Technical Tip: How to enable STUN protocol in policy

Description This article describes how to enable the STUN protocol in a firewall policy. Scope FortiOS in the default NGFW profile-based mode (with or without Central SNAT enabled). Solution STUN is a protocol used to allow UDP communica

101331

B

14 hours ago

gfuzzNew Member

Published in Support Forum

REST API Availability in FIPS-CC mode

Hello everyone, As for i know, REST API Administrators should be disabled by default in FIPS-CC mode:1) (REST API admin account option is not avai... - Fortinet Community)2) (Solved: Re: Fortigate 3301E missing API 7.2.11 - Fortinet Community)&n

3132

15 hours ago

kchengStaff & Editor

published in FortiGate

FortiGate enters conserve mode after upgrading to FortiOS version 7.6.8 (IPSEngine 7.01200)

DescriptionThis article describes an issue with the default IPSEngine 7.01200 that is being distributed with the installation of FortiOS version 7.6.8. The IPSEngine will be installed for FortiOS through the upgrade process or a fresh installation. S

27727

15 hours ago

ibrugnolliStaff

Published in Support Forum

FortiAnalyzer SOC Automation integration guide with Cisco Meraki MX device

Welcome to the FortiAnalyzer SOC Automation integration guide with Cisco Meraki MX device. This project provides procedures to properly configure the FortiGuard SOC Automation third-party log parser, set up a Cisco Meraki MX device to export syslog m

100

15 hours ago

Krzysztof1New Member

Published in Support Forum

FortiAuthenticator - Azure sbapshot issue

Hello,I found strange issue with FAC in Azure (from marketplace).When I am trying to do a rollback, using disks created from snapshots (OS and Date), FAC VM doesn’t start.There is an error:“Failed to start virtual machine 'fac-vm-azure'. Error: Creat

221

16 hours ago

G

glassfortressNew Member

Published in Support Forum

Webfilter blocks URLs inconsistently

I have a firewall rule which implements a web filter rule that allows only three domains and blocks all others. I also have an Application Filter which has Monitor action set for Firewall Browser and SSL applications. The firewall rule itself is set

538

G

21 minutes ago

bmartzNew Member

Published in Support Forum

Unable to peer in ipv6 with ISP AS number. Customer has their own ipv6 /48 block not supplied by isp

Customer has their own ipv6 /48 block not supplied by isp and I am unable to establish a neighbor relationship. ISP supplied link-local address as a Routing Object.

325

4 hours ago

gfuzzNew Member

Published in Support Forum

REST API Availability in FIPS-CC mode

Hello everyone, As for i know, REST API Administrators should be disabled by default in FIPS-CC mode:1) (REST API admin account option is not avai... - Fortinet Community)2) (Solved: Re: Fortigate 3301E missing API 7.2.11 - Fortinet Community)&n

3132

15 hours ago

ibrugnolliStaff

Published in Support Forum

FortiAnalyzer SOC Automation integration guide with Cisco Meraki MX device

Welcome to the FortiAnalyzer SOC Automation integration guide with Cisco Meraki MX device. This project provides procedures to properly configure the FortiGuard SOC Automation third-party log parser, set up a Cisco Meraki MX device to export syslog m

100

15 hours ago

Krzysztof1New Member

Published in Support Forum

FortiAuthenticator - Azure sbapshot issue

Hello,I found strange issue with FAC in Azure (from marketplace).When I am trying to do a rollback, using disks created from snapshots (OS and Date), FAC VM doesn’t start.There is an error:“Failed to start virtual machine 'fac-vm-azure'. Error: Creat

221

16 hours ago

T

timfatu7New Member

Published in Support Forum

Juniper switch setup

HelloI’m new to networking and have got to start configuring Juniper switches. We already have FortiNac up and running.I know each port needs some VLAN tagged to if.So could I set all the ports at VLAN 1 (for example), then get Forti to manage the po

191

18 hours ago

N

NathanielM_OpusVNew Member

Published in Support Forum

Upgrading directly - Skipping intermediates via TFTP recovery method

Hi all,Haven’t been able to work out if this has been answered or asked before. For the questions, please assume that there is no configuration (out of the box, so we don’t care about its defaults) and the devices have licenses but not available (I.E

434

19 hours ago

I

ITC_NVisitor II

Published in Support Forum

Websites not loading with Deep Inspection - 400 Bad Request

Since yesterday morning a lot of websites give a 400 Bad Request ( see screenshot) when DeepInspection is enabled.Disabling DeepInspection fixed the problem.I also saw other issues relating DeepInspection(https://community.fortinet.com/support-forum-

60818

19 hours ago

W

Wesley GamaExplorer

Published in FortiSIEM

FortiSIEM 7.6 – Post-update experiences

Hi everyone, I’d like to know if anyone in the community has already upgraded FortiSIEM to version 7.6 in a production environment.For those who have already upgraded:How has the experience been so far?Did you encounter any bugs or unexpected behavio

732

20 hours ago

V

virajwNew Member

Published in Support Forum

FortiGate VM GUI Immediately Logs Out After Successful Login

I'm facing a strange issue with a new FortiGate VM instance running on Proxmox.EnvironmentHypervisor: Proxmox VE FortiGate: FortiGate VM Disk image: fortios.qcow2 Access: Web GUI over HTTPS Version: FortiGate-VM64-KVM v8.0.0.build0167.260420 (GA.F)Is

2755

Y

20 hours ago

johnathanStaff

published in FortiGate

Copilot is not usable after an upgrade to version 7.6.8 while the Explicit Proxy is in use

DescriptionAfter upgrading to version 7.6.8, when using the FortiGate as an Explicit Proxy with the default settings, chat messages for Copilot will be blocked.ScopeFortiOS version 7.6.8+.SolutionAfter upgrading to version 7.6.8, users who are trying

5102

9 hours ago

amalskyStaff

published in FortiGate

Technical Tip: Migrate SAML authentication from SSL VPN to dial-up IPsec IKEv2 while keeping SSL VPN in service

DescriptionThis article describes how to add SAML authentication to a dial-up IPsec IKEv2 remote-access VPN on a FortiGate that already runs SSL VPN with SAML, without modifying or interrupting the existing SSL VPN service.ScopeFortiOS v7.2, v7.4, v7

11911

B

13 hours ago

nnairStaff

published in FortiGate

Technical Tip: How to enable STUN protocol in policy

Description This article describes how to enable the STUN protocol in a firewall policy. Scope FortiOS in the default NGFW profile-based mode (with or without Central SNAT enabled). Solution STUN is a protocol used to allow UDP communica

101331

B

14 hours ago

kchengStaff & Editor

published in FortiGate

FortiGate enters conserve mode after upgrading to FortiOS version 7.6.8 (IPSEngine 7.01200)

DescriptionThis article describes an issue with the default IPSEngine 7.01200 that is being distributed with the installation of FortiOS version 7.6.8. The IPSEngine will be installed for FortiOS through the upgrade process or a fresh installation. S

27727

15 hours ago

jo_rangStaff

published in FortiGate

After upgrade to FortiOS 7.4.13, user receives error "400 Bad Request" when using proxy inspection and Deep Packet inspection

DescriptionAfter upgrading to FortiOS 7.4.13, a user may start receiving "Error 400: Bad Request" when accessing legitimate sites when the firewall policy is set to use Deep Packet Inspection and proxy-based inspection.ScopeFortiOS 7.4.13.SolutionFol

380

17 hours ago

ZTianStaff

published in FortiToken

New public IP addresses for the FortiToken Mobile push service (push.fortinet.com)

DescriptionFortinet has migrated the FortiToken Mobile push service (push.fortinet.com) to new public IP addresses. Two of the four service addresses have been replaced, and the other two are unchanged. Requests to push.fortinet.com are routed to one

90

17 hours ago

SureshkumarStaff

published in FortiEdgeCloud

How to resolve the 'Invalid Client Certificate' error when uploading a RADSec certificate in FortiEdge Cloud

DescriptionThis article describes how to resolve the 'Invalid Client Certificate' error encountered when uploading a client certificate for RADSec (RADIUS over TLS) configuration in FortiEdge Cloud.ScopeFortiEdge Cloud, FortiAP, RADSec.SolutionWhen c

120

17 hours ago

YetKStaff

published in FortiGate

Troubleshooting Tip: Troubleshooting the error 'Failed to download log disk status from FIM, please reset FPMx'

DescriptionThis article describes an issue observed on the FortiGate 7k chassis platform where some FPMs fail to rejoin the chassis following an unexpected power outage.ScopeFortiGate 7000F series.SolutionThe issue mentioned in this article was obser

70

18 hours ago

kgurbuzStaff

published in FortiPAM

HTTP 400 Bad Request error

DescriptionUsers encounter an HTTP 400 Bad Request error when launching secrets in FortiPAM version 7.0.0 after a passkey is registered and an Active Directory password change occurs.ScopeFortiPAM version 7.0.00.SolutionAfter upgrading FortiPAM to fi

50

19 hours ago

kgurbuzStaff

published in FortiPAM

Push notification issue after upgrading to firmware version 7.0.0

DescriptionPush notifications for multi-factor authentication fail to deliver after updating FortiPAM to firmware version 7.0.0.ScopeFortiPAM.SolutionAfter updating FortiPAM to firmware version 7.0.0, users stop receiving push notifications during th

60

19 hours ago

Top Helpful Authors

Currently there are no user.

VIEW ALL

Badge Updates

glassfortresshas earned the badge First Reply
AdamC1228has earned the badge First Reply
bmartzhas earned the badge First Reply

VIEW ALL

Events

Start Conversation

Find and follow interesting people, join groups for discussion and share files

Featured Articles

Recommended release for FortiOS

DescriptionRecommendations for the most appropriate FortiOS software release. The recommendations stated below are the latest as of October 2026, and...

3 years ago

458419513

Technical Tip: FortiGuard is not reachable via Anycast default method

DescriptionThis article describes how to troubleshoot FortiGuard connectivity when the Anycast default method does not work.ScopeFortiGate v6.4.3 and...

A

5 years ago

1257000

Technical Tip: FortiCompanion to Technical Support

Description This article describes how to make the best use of Fortinet’s Technical Support Services. Scope FortiCare. Solution FortiCare Tech...

1 year ago

467701

Technical Tip: How to reset to factory default configuration using external button

Description This article describes how to factory reset the FortiGate to erase the current configuration using the external reset button on low-end Fo...

14 years ago

6385890

Technical Tip: Setting TCP MSS value

Description This article describes how to set the TCP MSS value. The Maximum Segment Size (MSS) is a parameter in the OPTIONS field of the TCP header...