Welcome to the Fortinet Community!

Deployment FortiSASE SPA with FortiGate HA active - Passive

Hello All Kindly i need admin guide for deploying SPA FortiSASE with 2 FortiGate devices HA active - passive So please advice with the steps and guide Thanks

131

1 hour ago

salassilvajExplorer III

vpn ssl subinterface stop working but internet is reachable

vpn ssl stop working but internet is reachable,my topology is a sdwan connection to internet from two wan sub interfaces joined as sdwan members into a sdwan-zone, we are using the fortigate lower models and firmware are 7.4.0 and 7.2.4, internet con

NateSidesNew Member

uplink fortinet to new ruckus

so, i have existing ICX8200’s in this infrastructure and older ICX6450’s. we’re replacing the 6450’s with 124F-FPOE switches, but i’m having trouble getting the 124’s to talk to the 8200’s. the 124’s are running 8.0.0(47). the 124’s will uplink to

AEKSuperUser

Source IP for cert probe

Hi FGT adminsFortiOS 7.4.12. All HTTPS sited are blocked with error: “SSL connection is blocked due to unable to retrieve server's certificate”.In the latest FOS updates the FGT probes the certificate itself (self generated traffic) before allowing o

574

5 hours ago

enajinNew Member

VPN DNS Suffix issue FG200E v7.6.7

Hello,I've been working on setting up an IPsec VPN on our FG200E after upgrading to FortiOS 7.6.7, mainly so we can take advantage of DNS suffix assignment from the firewall.Our environment has two separate Active Directory domains in a trust relatio

111

6 hours ago

Andreas77_FTNTStaff

Technical Tip: Chromecast across subnets

DescriptionThis article describes how to allow traffic from client device to Chromecast and vice versa.SolutionChromecast uses a set of protocols including DIAL, mDNS, SSDP and HTTP.This usually works well on the same subnet, however when using diffe

435551

8 hours ago

P

Patrick GranzierNew Member

how to check which Contract Registration Code was used for a device

Hello, we have several Fortgates, swites and AP. But one of my former collegues. has not written down which Contract Registration Code was used for which device. Is there a way to check which Contract Registration Code was used on a device. w.k.r.Pat

arleniscgStaff

Technical Tip: Tracking exception changes in FortiEDR manager

DescriptionThis article describes how to review FortiEDR audit logs to identify which user created, modified, or deleted an exception in the FortiEDR manager.ScopeFortiEDR.SolutionGenerate and collect the Audit Logs for the date range or time period

301

sdebnathStaff

Troubleshooting Tip: Unable to upgrade FortiGate Firmware, the upgrade option is grayed out

Description This article explains why the firmware upgrade option appears grayed out even when a new firmware version is available. Scope All supported versions of FortiGate. Solution The Upgrade button under FortiGate -> System -> Firm

SchulzNew Member

Feature Request: Bulk Operations in FortiManager

It would be very nice, if Fortinet will add some bulk funktions to change configuration in menues like static routes. Sometimes we have to change things in many routes like interface or distance or priority. It would be nice if this button becomes av

110

MemoNew Member

Deployment FortiSASE SPA with FortiGate HA active - Passive

Hello All Kindly i need admin guide for deploying SPA FortiSASE with 2 FortiGate devices HA active - passive So please advice with the steps and guide Thanks

131

1 hour ago

salassilvajExplorer III

vpn ssl subinterface stop working but internet is reachable

vpn ssl stop working but internet is reachable,my topology is a sdwan connection to internet from two wan sub interfaces joined as sdwan members into a sdwan-zone, we are using the fortigate lower models and firmware are 7.4.0 and 7.2.4, internet con

NateSidesNew Member

uplink fortinet to new ruckus

so, i have existing ICX8200’s in this infrastructure and older ICX6450’s. we’re replacing the 6450’s with 124F-FPOE switches, but i’m having trouble getting the 124’s to talk to the 8200’s. the 124’s are running 8.0.0(47). the 124’s will uplink to

enajinNew Member

VPN DNS Suffix issue FG200E v7.6.7

Hello,I've been working on setting up an IPsec VPN on our FG200E after upgrading to FortiOS 7.6.7, mainly so we can take advantage of DNS suffix assignment from the firewall.Our environment has two separate Active Directory domains in a trust relatio

111

6 hours ago

P

Patrick GranzierNew Member

how to check which Contract Registration Code was used for a device

Hello, we have several Fortgates, swites and AP. But one of my former collegues. has not written down which Contract Registration Code was used for which device. Is there a way to check which Contract Registration Code was used on a device. w.k.r.Pat

SchulzNew Member

Feature Request: Bulk Operations in FortiManager

It would be very nice, if Fortinet will add some bulk funktions to change configuration in menues like static routes. Sometimes we have to change things in many routes like interface or distance or priority. It would be nice if this button becomes av

110

HS08Visitor III

Fnac Vlan Change Inventory

When i move endpoint to another host role the on the policy the endpoint should get a new vlan (37) but why in the inventory the endpoint still use old vlan (32) and i must wait up to 3 minutes then the vlan is changed?

341

MandalorianExplorer III

Querying the same remote LDAP servers via FortiGate and FortiAuthenticator (FAC)

Hi everyone,On my FortiGate running v7.4.9, I have a specific VDOM configured for one of my clients.Currently, this VDOM is integrated with a FortiAuthenticator (FAC), which in turn queries two remote LDAP servers to handle MFA for client VPNs. I now

csmgrNew Member

Blocking by the Tailscale application on Fortigate

Fortigate can block the Tailscale application with policy and application control; it will block both inbound Tailscale sessions and outbound Tailscale sessions. Is it possible to block only inbound Tailscale sessions, and still allow outbound Tailsc

281

HS08Visitor III

Forinac sometime not send CoA

If the endpoint was idle for some time then when i change the group on the NAC, I can see the fortinac not send the CoA to the switch.We can see here the last fnac send the CoA is 14:02:18 then i change the group for that host at 14:30 and there is n

661

Andreas77_FTNTStaff

Technical Tip: Chromecast across subnets

DescriptionThis article describes how to allow traffic from client device to Chromecast and vice versa.SolutionChromecast uses a set of protocols including DIAL, mDNS, SSDP and HTTP.This usually works well on the same subnet, however when using diffe

435551

8 hours ago

arleniscgStaff

FortiEDR

Technical Tip: Tracking exception changes in FortiEDR manager

DescriptionThis article describes how to review FortiEDR audit logs to identify which user created, modified, or deleted an exception in the FortiEDR manager.ScopeFortiEDR.SolutionGenerate and collect the Audit Logs for the date range or time period

301

sdebnathStaff

Troubleshooting Tip: Unable to upgrade FortiGate Firmware, the upgrade option is grayed out

Description This article explains why the firmware upgrade option appears grayed out even when a new firmware version is available. Scope All supported versions of FortiGate. Solution The Upgrade button under FortiGate -> System -> Firm

kgurbuzStaff

Troubleshooting Tip: Sponsor cannot view/print guest user passwords, while admin can

DescriptionThis article describes an issue with guest users' password view via the print button.ScopeFortiAuthenticator.SolutionWhen a sponsor creates a guest user account, the password cannot be viewed/printed. If an admin does the same operation, t

40

kgurbuzStaff

Troubleshooting Tip: LDAP authentication failure via FortiAuthenticator and FortiIdentity Cloud using Zero Trust Tunnel (ZTNA TCP forwarding) on FortiGate

DescriptionThis article describes a known issue for LDAP authentication failure when using Zero Trust Tunnel on FortiAuthenticator and FortiIdentity Cloud via FortiGate ZTNA TCP Forwarding.ScopeFortigate, FortiAuthenticator, FortiIdentity Cloud. Affe

110

esalijaStaff

Troubleshooting Tip: After v7.4.6, the FortiToken Mobile Activation emails have the same sender and receiver

Description This article describes an issue where, after FortiOS v7.4.6, users who use their email addresses for activation of the FortiToken Mobile receive the same email address as both the sender and receiver. Scope FortiGate. Solution

idumancicStaff

Technical Tip: Changes in SAML settings after upgrade FortiAuthenticator v8.0.2 version that affects Service Provider

DescriptionThis article describes changes in SAML settings after upgrade FortiAuthenticator to version v8.0.2 and above, which also affect the Service Provider side.ScopeFortiAuthenticator.SolutionAfter a FortiAuthenticator upgrade to v8.0.2 and abov

tbaruaStaff

Technical Tip: Active Session Video Monitoring Not Showing in Real Time

DescriptionThis article describes the expected delay behavior of the Active Session Video Monitoring feature in FortiPAM.ScopeFortiPAM v1.9 and above.SolutionWhen using the Monitor Active Session feature, users may observe a delay between the actual

20

11 hours ago

HatibiStaff & Editor

FortiNAC-F

Technical Tip: FortiNAC Automated Incident Response based on FortiAnalyzer security events

DescriptionThis article describes how to validate the integration between FortiNAC and FortiAnalyzer with regards to incident response.ScopeFortiNAC-F, FortiAnalyzerSolutionIn this scenario, FortiNAC responds to security incidents based on syslog mes

120

12 hours ago

candawiStaff