Support Forum
- - Knowledge Base
Community Groups
Blogs

Create topic
Login

Celebrating our Community: Thank You for an Incredible Month

30 days ago

Welcome to the Fortinet Community!

73,615 Discussions
83,115 Replies
207,431 Members

Community Guidelines

Consult our Support Forum

Explore the Fortinet Knowledge Base

Ask questions and help others

Top Community Conversations

Recent activity
Unanswered
Recent KB Articles

aelkadiStaff

FortiWeb

Troubleshooting Tip: How to resolve HTTP/2 'Header List Size in SETTINGS Frame Exceeded' error on FortiWeb

DescriptionThis article describes how to resolve the HTTP/2 'Header List Size Exceeded' error on FortiWeb. This issue may occur when the request header size exceeds the allowed limit, resulting in the connection being blocked.ScopeFortiWeb.SolutionFr

00

45 minutes ago

Sinichi_KudoExplorer

Support Forum

IPsec VPN Access Control for Different Users on the Same Tunnel and Troubleshooting Multiple Tunnels Issue

Hi Fortinet Community,Could you please provide some guidance on the following scenario?I currently have a single IPsec VPN tunnel configured, and the accessible networks include Servers 1, 2, 3, 4, 5, and 6.I have different users who need access to s

02

54 minutes ago

guptasStaff

FortiAppSec Cloud

Technical Tip: What action needs to be taken when there is an outage for any region

DescriptionThis article describes how to tell when there will be any outages in a region, and what actions an administrator must take during such outages.ScopeFortiAppSec Cloud.SolutionScenario 1:Consider an example where there is an outage on an adm

00

2 hours ago

kiriStaff & Editor

FortiGate

Technical Tip: How to enable EAP-TTLS for IPSec IKEv2 tunnels in VPN-only (unlicensed) FortiClient

Description This article describes how to enable EAP-TTLS as an authentication method in VPN-only (unlicensed) FortiClients. Scope FortiClient, EAP-TTLS authentication for IPsec VPN. Solution EAP-TTLS Support in FortiClient. FortiCli

308783

2 hours ago

S

stephane_93New Member

Support Forum

NSE4 current status

Hello, I apologize in advance if this sounds like a stupid question. I passed the NSE4 Certification Exam on June 18, 2024. I very recently heard that my certification would run out of validity if it’s 2 years old. I have to take the NSE5 Certificati

01

S

2 hours ago

nqtuan_qtuanNew Member

Support Forum

FortiMail unsupported certificate purpose

Hi all, I'm rather new to FortiMail and Fortinet products. Trying to configure same wildcard cert (e.g. *.domain.com) for both Exchange and FortiMail, using an internal Windows CA. The topology of email is like: exch.domain.com > fml.dom

mcakarNew Member

Relaying mails from Exchange Online via Fortimail to external in a secure way

Hello all,we have an Exchange Hybrid setup with all our mailboxes on-prem. We need to let graph send emails via Exchange Online but we would need to relay these emails via our Fortimail appliance. So the Exchange Online environment does not send thes

SteveJWNew Member

Vague "Patching Failed" alerts FortiClient

The FortiEMS server is running version 7.4.7, while the client version on the workstations and servers is 7.4.5.We plan to upgrade soon.In the clients' "Notifications" tab, I see many "Patching Failed" alerts.The installers were never created with th

00

3 hours ago

icianciStaff

FortiMail

Troubleshooting Tip: SPF action not applied in FortiMail

DescriptionThis article describes how to troubleshoot why the SPF check fails, but corresponding actions are not applied in FortiMail.ScopeFortiMail.SolutionSpam email has been received from a spoofed IP address that is not in the SPF list for the re

91

3 hours ago

sjoshiStaff

FortiGate

Troubleshooting Tip: DHCP relay not working when passing through LTE interface on FortiWifi 50G-5G

DescriptionThis article describes an issue where DHCP relay is not working over a LTE interface on a FortiWifi 50G-5G.ScopeFortiWifi.SolutionTopology:A private WAN APN is in use, and DHCP requests are being forwarded by the firewall to a DHCP server

00

3 hours ago

Sinichi_KudoExplorer

Support Forum

IPsec VPN Access Control for Different Users on the Same Tunnel and Troubleshooting Multiple Tunnels Issue

Hi Fortinet Community,Could you please provide some guidance on the following scenario?I currently have a single IPsec VPN tunnel configured, and the accessible networks include Servers 1, 2, 3, 4, 5, and 6.I have different users who need access to s

02

54 minutes ago

S

stephane_93New Member

Support Forum

NSE4 current status

Hello, I apologize in advance if this sounds like a stupid question. I passed the NSE4 Certification Exam on June 18, 2024. I very recently heard that my certification would run out of validity if it’s 2 years old. I have to take the NSE5 Certificati

01

S

2 hours ago

nqtuan_qtuanNew Member

Support Forum

FortiMail unsupported certificate purpose

Hi all, I'm rather new to FortiMail and Fortinet products. Trying to configure same wildcard cert (e.g. *.domain.com) for both Exchange and FortiMail, using an internal Windows CA. The topology of email is like: exch.domain.com > fml.dom

mcakarNew Member

Relaying mails from Exchange Online via Fortimail to external in a secure way

Hello all,we have an Exchange Hybrid setup with all our mailboxes on-prem. We need to let graph send emails via Exchange Online but we would need to relay these emails via our Fortimail appliance. So the Exchange Online environment does not send thes

SteveJWNew Member

Vague "Patching Failed" alerts FortiClient

The FortiEMS server is running version 7.4.7, while the client version on the workstations and servers is 7.4.5.We plan to upgrade soon.In the clients' "Notifications" tab, I see many "Patching Failed" alerts.The installers were never created with th

TutekNew Member

Hi,I now create additional dialup tunnels on second wan for failover, but we use ftm to get notifications during login on mobile smartphones, the config looks like:FGT (ftm-push) # show full-configuration config system ftm-push set proxy enable

kirito34New Member

Azure vWAN and fortigate managed app NVA deployment using terraform, is it worth it?

Hey guys,I'm failrly new to terraform and I was curious if fortigate managed app deployment within Azure vWAN is a good option/approach? Keeping in mind that rest of the infrastructure (vWAN, HUB/s, VNETs, NSGs, subnets..etc) is deployed using terraf

AdilbabuNew Member

FortiManager error installing packages with terraform

I am currently trying to see the limits of Terraform in deploying configuration in Fortimanager and Fortigates. My goal is to beable to implement a webfilter on policies and install those policies and the package (FortiManager) related on the require

DanieleS99Explorer

Connection reset with FPAM web launching sessions

Hi,I recently implemented FPAM and I have a strange behavior with all the web launching sessions.The FPAM is in a subnet dedicated.My pc is on another subnet and the internal services and external(obviously) are on other subnets.In the middle there’s

00

7 hours ago

renanrdriguesExplorer II

Support Forum

FortiManager "unset cert-probe-failure"

We have FortiManager 7.6.7 and two FortiGates running FortiOS 7.4.11.Under Security Profiles > SSL/SSH Inspection, we have an object named “SSL-EXCEPT” with set cert-probe-failure allow, and this profile is used in several firewall policies.In For

aelkadiStaff

Troubleshooting Tip: How to resolve HTTP/2 'Header List Size in SETTINGS Frame Exceeded' error on FortiWeb

DescriptionThis article describes how to resolve the HTTP/2 'Header List Size Exceeded' error on FortiWeb. This issue may occur when the request header size exceeds the allowed limit, resulting in the connection being blocked.ScopeFortiWeb.SolutionFr

00

45 minutes ago

guptasStaff

FortiAppSec Cloud

Technical Tip: What action needs to be taken when there is an outage for any region

DescriptionThis article describes how to tell when there will be any outages in a region, and what actions an administrator must take during such outages.ScopeFortiAppSec Cloud.SolutionScenario 1:Consider an example where there is an outage on an adm

00

2 hours ago

kiriStaff & Editor

FortiGate

Technical Tip: How to enable EAP-TTLS for IPSec IKEv2 tunnels in VPN-only (unlicensed) FortiClient

Description This article describes how to enable EAP-TTLS as an authentication method in VPN-only (unlicensed) FortiClients. Scope FortiClient, EAP-TTLS authentication for IPsec VPN. Solution EAP-TTLS Support in FortiClient. FortiCli

308783

2 hours ago

icianciStaff

FortiMail

Troubleshooting Tip: SPF action not applied in FortiMail

DescriptionThis article describes how to troubleshoot why the SPF check fails, but corresponding actions are not applied in FortiMail.ScopeFortiMail.SolutionSpam email has been received from a spoofed IP address that is not in the SPF list for the re

91

3 hours ago

sjoshiStaff

FortiGate

Troubleshooting Tip: DHCP relay not working when passing through LTE interface on FortiWifi 50G-5G

DescriptionThis article describes an issue where DHCP relay is not working over a LTE interface on a FortiWifi 50G-5G.ScopeFortiWifi.SolutionTopology:A private WAN APN is in use, and DHCP requests are being forwarded by the firewall to a DHCP server

00

3 hours ago

kanandStaff

FortiGate

Troubleshooting Tip: SSL VPN SAML Authentication not working for some users of the same group

Description This article describes the SAML SSL VPN authentication failure for some users while it works for others, provided they are part of the same group. Scope FortiGate all versions. Solution SAML SSL VPN authentication fails for some u

jcovarrubiasStaff

Technical Tip: 'Layer-1 and Layer-2 Troubleshooting' with 2 simple commands

Description This article describes how to determine if a device is physically connected to the FortiGate and can help detect potential problems with three commands. Scope FortiGate. Solution Command 1: Identify the available ports with:

15041

13 hours ago

Arif69Staff

FortiManager

Technical Tip: FortiManager's behavior of installing Policy Package with same VLAN ID used in FortiSwitch VLANs and Network Interface

DesriptionThis article describes FortiManager's behavior of installing Policy Package with same VLAN ID used in FortiSwitch VLANs and Network Interface.ScopeFortiManager.SolutionThe following diagram shows interface 'Interface A' in device 'FGT A', w

Matt_LStaff

Troubleshooting Tip: How to utilize the FortiGate 'diagnose debug application' command for troubleshooting various FortiGate processes/daemons

Description This article shows how to utilize the FortiGate 'diagnose debug application' command to troubleshoot issues with FortiGate processes/daemons. Scope FortiOS v7.4. Solution To see the complete list of processes/daemons that are avai

SheikhStaff

Troubleshooting Tip: Resolve WPA2-Enterprise authentication failure after certificate renewal in a FortiNAC HA environment

DescriptionThis article describes how to resolve WPA2-Enterprise wireless authentication failures that may occur after renewing or replacing the certificate used by the FortiNAC RADIUS service.After a certificate renewal, wireless clients may fail to

50

1 day ago

Top Helpful Authors

Currently there are no user.

VIEW ALL

Badge Updates

singhlhas earned the badge Summer 2026
rmagdalchukhas earned the badge Summer 2026
stephane_93has earned the badge First Reply

VIEW ALL

Events

Start Conversation

Find and follow interesting people, join groups for discussion and share files

Featured Articles

Technical Tip: Adding an additional SWAP disk

Description This article describes how to add an additional SWAP disk. Scope FortiSIEM. Solution Add a new HDD of 20 to 30 GB from the Hyper...

Forum|Forum|2 months ago

1200

Technical Tip: FortiManager config push fails with commit failed error after upgrading it to v7.6.5 GA

Description This article describes how to resolve the installation task failure issue due to a post-commit check failure: wireless-controller vap - ss...

Forum|Forum|2 months ago

5770

Technical Tip: Troubleshooting FortiGate not getting connected to FortiAnalyzer Cloud

Description This article describes the steps to troubleshoot a FortiGate device that is not getting connected and logging to FortiAnalyzer Cloud. The...

Forum|Forum|2 months ago

4470

Technical Tip: Clear old system logs in FortiSIEM

Description This article describes how to clear old logs. Scope FortiSIEM. Solution The following steps describe how to review the current space used...

Forum|Forum|2 months ago

2170

Fortigate Install on ProxMox

Good day,Trying to install fortigate on ProxMox but unable to do so. I followed the install guide but when the VM is started it gets stuck on formatti...

Forum|Forum|9 months ago

16773

Troubleshooting Tip: How to force a 4G LTE only or a 5G only connection via AT!SELRAT command on the FortiExtender-511G

Description This article describes the steps to force a 4G LTE-only or a 5G only connection via AT!SELRAT command on the FortiExtender-511G. Scope F...

Forum|Forum|2 months ago

1650

Troubleshooting Tip: How to solve booting loop on FortiSwitch-6xxF series when using soft reboot

Description This article describes how to solve the booting loop on FortiSwitch-6xxF series when using soft reboot. Scope FortiSwitch 6xxF-FPOE Seri...

Forum|Forum|2 months ago

1690