Welcome to the Fortinet Community!

DialUp IPSec VPN - Assign IP From SAML Group

I have an DialUp VPN with Entra ID Auth. IP Assignment via IP Range.I want to assign different ranges to different users based in their Group memberships.I found CLI Option "set assign-ip-from usrgrp".Is it possible to use this or any other option to

345New Member

FG-FAZ no connectivity issue

Hello,I need help about our issue with connectivity FG<->FAZ. We are currently troubleshooting connectivity between a FortiGate 200G and a FortiAnalyzer VM.Environment overview:FortiGate 200G running in multi-VDOM modeDedicated management inter

603

mbasExplorer

It is not possible to delete rogue devices from the FortiNAC database if there are too many

Hi all, I am installing FortiNAC in a large environment and I added the Aruba WLC to FortiNAC without any issues. 3 days later, FortiNAC performed L2 pooling and discovered over 400,000 rogue hosts. After that, I disabled L2 pooling for the WLC, whic

201

O

ovishek_birdseyeNew Member

FortiGate 60F – SSL VPN Concurrent User & Licensing Clarification Needed

Hello Everyone,We are planning to deploy a FortiGate 60F firewall with a 1-year Unified Threat Protection (UTP/UDP) license in our environment.Currently, we are already using the device for basic WAF-related tasks, and now we want to enable remote VP

251

TwoSoulzNew Member

Hub and Spoke (ADVPN+mode-cfg) not working after upgrading to 7.4.9

Hello, used products: FortiGate 80F/FortiGate 400F I have a simple Hub and Spoke Szenario, which works perfectly in 7.4.8 and less. If I upgrade my spoke to 7.4.9 I can't establish my VPN any more. Spoke says: ike V=root:0:vp

7632

3 hours ago

school-adminVisitor III

Using multiple wildcard certificates with "Protecting SSL server"

The documentation states you can define multiple certificates in an SSL profile in replace mode and it will compare the server name identification (SNI) and the common name (CN) with the certificate list in the SSL profile, and use the matched certif

SerzhanNew Member

Fortimail 8.0 not working final url

Hello, I have a question regarding the “final URL inspection” improvements mentioned in recent FortiMail updates. According to the release information/documentation, FortiMail should now be able to: * resolve redirects,* analyze the final destination

433

S

5 hours ago

adem_netsysExplorer III

FortiSOAR community

Ingest Incident and Delete Alerts

Hello guys,We’re receiving incidents from FSIEM, but there are a large number of incidents in this environment; even though we’ve scheduled it to run every 15 minutes, when we retrieve the data, nearly all the incidents are pulled at once. What exact

141

51 minutes ago

WarrenCookCommunity Manager

Fortinet Community Experience

Reporting Fortinet Community issues

Are you seeing something in the Fortinet Community that is not working as expected? For example, a page not loading, a button not working, or a display issue? Reply to this thread to report Community-site issues. Note: This thread is for issues with

CordialNew Member

IPSEC - Timeouts - between FG201F Cluster 7.2.13 and SFOS 22.0.0 GA-Build411

Hello everyone, We have been trying for weeks to establish a stable connection between two data centres. Our router is the Sophos Appliance and the remote site uses the Fortinet cluster. The connection is established successfully. Ping works, but the

121

1 hour ago

hatanmaekNew Member

DialUp IPSec VPN - Assign IP From SAML Group

I have an DialUp VPN with Entra ID Auth. IP Assignment via IP Range.I want to assign different ranges to different users based in their Group memberships.I found CLI Option "set assign-ip-from usrgrp".Is it possible to use this or any other option to

345New Member

FG-FAZ no connectivity issue

Hello,I need help about our issue with connectivity FG<->FAZ. We are currently troubleshooting connectivity between a FortiGate 200G and a FortiAnalyzer VM.Environment overview:FortiGate 200G running in multi-VDOM modeDedicated management inter

603

mbasExplorer

It is not possible to delete rogue devices from the FortiNAC database if there are too many

Hi all, I am installing FortiNAC in a large environment and I added the Aruba WLC to FortiNAC without any issues. 3 days later, FortiNAC performed L2 pooling and discovered over 400,000 rogue hosts. After that, I disabled L2 pooling for the WLC, whic

201

O

ovishek_birdseyeNew Member

FortiGate 60F – SSL VPN Concurrent User & Licensing Clarification Needed

Hello Everyone,We are planning to deploy a FortiGate 60F firewall with a 1-year Unified Threat Protection (UTP/UDP) license in our environment.Currently, we are already using the device for basic WAF-related tasks, and now we want to enable remote VP

251

school-adminVisitor III

Using multiple wildcard certificates with "Protecting SSL server"

The documentation states you can define multiple certificates in an SSL profile in replace mode and it will compare the server name identification (SNI) and the common name (CN) with the certificate list in the SSL profile, and use the matched certif

SerzhanNew Member

Fortimail 8.0 not working final url

Hello, I have a question regarding the “final URL inspection” improvements mentioned in recent FortiMail updates. According to the release information/documentation, FortiMail should now be able to: * resolve redirects,* analyze the final destination

TipuNew Member

I have installed virtual box vm, but I can't work on web portal because of showing license issue.

How can I solve these problems?

383

5 hours ago

kyozloveyou_FTNTStaff

Technical Tip: Board failover tolerance in FortiGate Chassis

Description This article describes the option to reduce HA failover on FortiGate 6000/7000 when worker blades are down. Scope FortiGate 6K/7K Chassis. Solution When chassis FPM/FPCs are down, the HA failover will happen as per the article bel

4111

16 hours ago

ppatelStaff & Editor

Technical Tip: Enable path MTU discovery (PMTU)

Description This article describes how to enable path MTU (PMTU) discovery on Fortigate self-originated traffic. Scope FortiGate. Solution On 5.6 and 6.0 FortiOS lines, by default, any self-originated traffic from FortiGate (including pr

151701

20 hours ago

A

Anonymous_UserNew Contributor III

Customer Service

Customer Service Tip: Product Life Cycle Information on Fortinet products

Description   This article describes how to check the product life cycle (end of order date, last service extension date, end of support date) for hardware and software.   ScopeAll Fortinet Products. Solution   Access the Product Life

6952452

23 hours ago

aelkadiStaff

FortiWeb

Technical Tip: How to create a user admin group on FortiWeb using REST API

DescriptionThis article describes how to create a user admin group on FortiWeb using the REST API.ScopeFortiWeb.SolutionBefore issuing the API call, generate a Base64-encoded token for the Authorization header. This token is used to authenticate with

70

srajeswaranStaff

Technical Tip: How to upgrade FortiGate firmware using the REST API

DescriptionThis article describes how to upgrade FortiGate firmware programmatically usingthe REST API, covering authentication options, firmware upload, and post-upgradeverification.ScopeFortiGate.SolutionThe FortiGate REST API provides a monitor en

810

rmetzgerStaff

Technical Tip: Setting priority on static default routes to create a primary (preferred) and a secondary path

Description   This article outlines specific scenarios where, due to Reverse Path Forwarding (RPF) considerations, the FortiGate must maintain two default static routes across two external interfaces. However, this setup must adhere to the follo

439921

Technical Tip: How to retrieve content routing elements from HTTP Content Routing Policy using REST API

anovaStaff

FortiWeb

DescriptionThis article describes how to collect HTTP content routing details using the REST API on FortiWeb.Scope FortiWeb.SolutionBefore issuing the API call, a token for the 'Authorization' header is needed using base64. This is to pass the authen

70

Troubleshooting Tip: Unable to import users in FortiPhish using the CSV file

srahmatStaff

FortiPhish

DescriptionThis article describes how to troubleshoot issues when importing users in FortiPhish recipients using the CSV file.ScopeFortiPhish.SolutionWhen importing users using the CSV file by following the provided CSV template, it shows error as pe

60

Technical tip: FortiManager ADOM best practices

jalejoFTNTStaff

FortiManager

DescriptionThis article describes some ADOM best practices on FortiManager.ScopeFortiManager.SolutionBefore upgrades:Install any pending device settings and policy package changes, or retrieve the device configuration.After installation, make sure po

170

Technical Tip: How to expand FortiADC-VM logdisk size

kmakStaff

FortiADC

DescriptionThis article describes the steps to expand FortiADC-VM logdisk size.ScopeFortiADC, FortiADC-VM.SolutionPrerequisite:Log in access to the Virtualization host server.The logdisk size cannot be reduced after expansion.Steps: The FortiADC-VM h

30