Fortinet Community

Forticlient is not starting on my ARM windows 11 computerWhat is the problem with FortiClientSetup_7.4.4_arm64.exe ? 

Getting the web filter pop continuously after updating to 7.4.4. Followed the below guide and that does resolve the issue.  https://community.fortinet.com/t5/FortiClient/Troubleshooting-Tip-Allow-inPrivate-or-incognito-windows-when-a/ta-p/328347 I have been looking for away to enable these setting via Intune/GPO so users don't have to do it and am not finding anything useful or that I have gotten to work.  Has anyone done this yet or how are you handling these popups? 

A particular user received this message when attempting to connect to our vpn using ForticlientSSL VPN connection is down In one of the logs(fortitray.exe_sslvpnlib_1.log i noticed a "permission denied" errorsslvpnlib 1515 info] ====================================[2025-11-14 10:45:16.4795660 UTC-04:00] [13656:6260] [sslvpnlib 1522 info] GetWebPage() succeeded. bRC=1,strContentType=text/html; charset=utf-8,strPageLength=1968[2025-11-14 10:45:16.4795769 UTC-04:00] [13656:6260] [sslvpnlib 501 debug] CSslvpnBase::DoConnect 3215[2025-11-14 10:45:16.4795840 UTC-04:00] [13656:6260] [sslvpnlib 501 debug] CSslvpnBase::DoConnect 3218 /remote/logincheck request returned permission denied[2025-11-14 10:45:16.4795917 UTC-04:00] [13656:6260] [sslvpnlib 501 debug] <<<<DoConnect(): bRC=0, ErrorCode=-7105[2025-11-14 10:45:16.5069513 UTC-04:00] [13656:6260] [sslvpnlib 4611 debug] called.[2025-11-14 10:45:16.5069561 UTC-04:00] [13656:6260] [sslvpnlib 4615 warning] FortiSslvpn has been i

Dear Support Team,We are experiencing an issue with the scheduled report function on our FortiAnalyzer / FortiGate system.Report name: 360 Degree Activities Report (Weekly Scheduled Report)Devices involved: FortiGate FG-101F (serials shown in the screenshot)Output: Weekly email PDF deliveryIssue description:The scheduled report is generated and emailed successfully.However, the PDF report contains no data — all sections (Application Visibility, Web Usage, Top Application Categories, etc.) show “No Data”.Please advise how we should configure the system so that the report includes application and web usage information.Thank you in advance for your support.Best regards, 

I’m a student whose only ever worked with Cisco and I can’t seem to grasp how vlans work in fortinet, I’m doing a lab with a fortigate and a fortiswitch but I am confused how vlans work, what’s the difference between a vlan created in interfaces and one created in fortiswitch ports? How do I connect the cables so the vlans work?

I have been tasked with deploying a guest wireless network for a facility my company is contracting for. I have a background working with Cisco, but I'm still fairly new to the Fortinet portfolio.  The infrastructure is going to be a FG400F connecting to a FS424E (functioning as the core) which will then connect to however many FS124F (access switches) and then from there a plethora of FAPs. I want to use a VLAN scheme along the lines of this: VLAN 5 (APs) — 10.0.5.0/23VLAN 20 (Wireless Client ) — 10.0.10.0/22VLAN 30 (Wired Client) — 10.0.20.0/23VLAN 40 (Splash Exempt) — 10.0.30.0/24 I've set up the FG, Core SW, and an Access SW already to practice configuring (it's my first time doing anything with a Fortiswitch!) My issue now is that when I create VLANs on the FortiSwitch, I'm not sure how to propagate them to the FAPs. It doesn't seem like I can apply any IPs to the APs themselves (perhaps thats all managed by FortiLink, rendering VLAN 5 moot) but I also don't un

We need to get two VMs to bypass the Fortigate and just go straight out to the internet.How do we do that?

hi everyone,  For about a week or so i have been seeing lot of dpd_failure for my IPsec tunnels. it is impacting both s2s and dial up IPsec. its random, no set time for when it happens. i have tried changing dpd settings but generally its set as 3 tries and 20 intervalchecked with ISP they of course are saying its not on them. another point to note is that this setup is not new, all the IPsec tunnels have been working well for the past 2 years. dpd_failure used to happen before but not like whats happening nowany idea whats causing it? thanks

Dear all, We configured the SNMPv3 in Cisco WLC and it's connected with FortiNAC successfully. Also configured user account with highest privilege for CLI settings. We avoided special characters in the password as well. While validating the credentials getting below error message, anyone experienced this issues. SNMP connect succeeded.However device failed to connect using CLI credentials.Device either does not support a CLI or credentials are invalid. Any suggestions, 

Hello Team, We have HA device both devices are login via Radius server, however we are facing issue with secondary firewall not able to login it shows Authentication Failure but on primary firewall we can be able to login the firewall without any issue. as of now workaround we are using that reboot the secondary firewall and after that it works fine but after couple of days issue raise again showing Authentication Failure. we tried to use set source-ip but nothing worked only solution we can afford as of now REBOOT. Can you please look into this serious issue  Thanks

can anyone provide steps to setup dynamic VLAN steering for windows 802.1x desktops in a DHCP environment.Components are FNAC, Cisco switch and windows desktops.

Hi, I have a P2P VPN that sometimes goes down for 40-60 minutes once or twice a day. The tunnel itself doesn't go down, but no traffic is passing. In the logs I see a delete IPsec phase 1 SA followed by install IPsec SA 45 min later, which correlates with the outage. What does the delete & install messages exactly mean? Is this a standard renegotiation because of key time? Thanks

Hi FNAC adminsFortiNAC 7.2.9FortiOS 7.4.9 with managed switchesIntegration is fine and all works great so far except when I add a new VLANs in my FortiLink it is not detected by FortiNAC, while all pre-existing VLANs are all detected.Performed Read VLANs, Resync Interfaces, Validate Credentials, L2/L3 poll, but new VLANs still not detected.I mean don't see the new VLANs when try Model Config, and don't see then when I try Test Device Mapping.Even when I assign the new VLAN manually to to a port on my FGT, the FNAC doesn't want to reflect this change (it keeps only known VLANs).Opened a ticket but no fix so far.Any idea about this issue?

I am trying to test DLP in my lab environment. I have tried lot of default options like Credit Card by email example etc but not able to block and also not able to view in logs. My Topology is PC --- (Internal) --Fortigate 50B-- (WAN) --- Office LAN with Email Server --- Office WAN I have tried every step of example from Cookbook but failed. My Fortigate have Firmware v400 build 0342. Any one help me to write any regular expression so that If I have any world or phrase in Email body or subject... I am able to get logs and if I tried to block that email I am able to do it. One more note that I didn' t have Email filter license, any issue with it.

So I enabled LDAPS on Fortigate, FortiADC, FortiVoice, Fortianalyzer and did NOT upload the RootCA to any of them and LDAP is still working.  For Fortianalyzer I enabled Debugging. So not sure if a cert is required on the fori side of things?  This is what I get with no CERT applied 2025-11-12 13:16:16 s121: auth request: user= from=GUI2025-11-12 13:16:16 s121: found admin:2025-11-12 13:16:16 s121: start ldap: LDAP2025-11-12 13:16:16 s121:LDAP: connecting to server 0: IPhere ip= port=636/tcp2025-11-12 13:16:16 s121:LDAP: connected2025-11-12 13:16:16 s121:LDAP: url: ldaps://IPhere:6362025-11-12 13:16:16 s121:LDAP: starting tls: ca=2025-11-12 13:16:16 s121:LDAP: binding admin: FortiSA2025-11-12 13:16:16 s121:LDAP: got result: Success(0) And here is what I get when a CERT is applied. 2025-11-12 13:16:16 s121: auth request: user= from=GUI2025-11-12 13:16:16 s121: found admin:2025-11-12 13:16:16 s121: start ldap: LDAP2025-11-12 13:16:16 s121:LDAP: connecti

Hi,In case anyone needs to assign static IP addresses to users connecting a IPsec DialUP with IKEv1 and RADIUS/NPS Windows Server, here's my working configuration. EnvironmentFGT 7.4.8Windows Server 2016 Standard with NPS/AD configuredFortiClient 7.4.3 ( EMS managed - should not be important/relevant and the free VPN-only should work ) IPsec configuration:config vpn ipsec phase1-interface edit "RA-IPsec" set type dynamic set interface "wan1" set mode aggressive set peertype any set net-device enable set mode-cfg enable set proposal aes128-sha1 aes256-sha1 set dpd disable set dhgrp 14 set xauthtype auto set reauth enable set assign-ip-from usrgrp set ipv4-start-ip 10.0.2.10 set ipv4-end-ip 10.0.2.20 set dns-mode auto set ipv4-split-include "IP Intern" set save-password enable set psksecret <> next end config vpn ipsec ph

I feel like I’m stupid, as I am trying to accomplish a very simple task. I currently have two Fortigate 60F firewalls with a properly configured VPN, as my SV9100 phone system at site A is able to communicate no problem with the VOIP phones at site B. i just acquired site C and it happened to have a Fortigate 60F with Fortiswitch 148-POE, which I had to factory reset as the company had gone out of business and left no documentation. i believe I setup the switch properly (created a VLAN and static assigned it to the switch, then firewall rules for both internet access and access to the site to site VPN back to site A.  Pings all work, no issues there on either side.  My phones register and appear to work properly except I have no audio on either end of any kind of call across the link.  RTP doesn’t appear to be going through. The rabbit hole I’ve gone down since has pointed to hidden policies that have to be set through only the CLI (https://www.reddit

The IPS is not working on my FortiGate (120G-v7.4.9). How can I find out what's wrong? The profile is configured and assigned to the groups in the firewall policy. My license is active until 2026.Best regards FGT-120G-L# diagnose test application ipsmonitor 1pid = 1979, engine count = 7 (+1)diag: read_retry:0 stuck:0 lock_retried:0 discarded:0 executed:0 lock_preempted:00 - pid:1988:1988 cfg:1 master:0 run:11 - pid:2333:2333 cfg:0 master:1 run:12 - pid:2334:2334 cfg:0 master:0 run:13 - pid:2335:2335 cfg:0 master:0 run:14 - pid:2336:2336 cfg:0 master:0 run:15 - pid:2337:2337 cfg:0 master:0 run:16 - pid:2338:2338 cfg:0 master:0 run:17 - pid:2339:2339 cfg:0 master:0 run:1pid: 2334 index:2version: 07004000FLEN07800-00007.00004.00587-2508271856up time: 35 days 14 hours 12 minutesinit time: 1 secondssocket size: 64(MB)database: ipsetdb appdbstate: raw(4/6):107/108 l2:109 l7:110(8 clients)bypass: disablepid: 1988 index:0 cfgversion: 07004000FLEN07800-00007.00004.00587-2508271856up time:

Good morning, I'm having a problem with two-factor authentication using email. Nobody is receiving the token (it was working fine until yesterday). I see the message "Failed to send alert email from fortinet-notifications.com to..." I pinged fortinet-notifications.com and it responded, but I don't see any other information in the logs. How do I fix this?I have a FortiGate 120g Fortios v7.4.9 build2829 (Mature).How can I resolve this?

Hello everyone,We are planed to configured Dual hub topology in our company, However we have currently deployed Single hub design in which we have 11 spokes and 1 hub.Our plan is to make 1 spoke site as secondary hub.MY QUESTION IS , that we already deployed single hub design and now moving to dual hub using Fortimanager , if i click on dual hub template from Fortimanager does it remove my current single hub configuration and recreate it using scratch ? or we have to only add secondary hub by using dual hub template in the Fortimanager. (We did not created Single Hub Design using Fortimanager) Kindly help i am just stuck on this.

Hi, ive been using this Installer since release and it has been working fine until recently.  Now when trying to open the application im presented with the "A JavaScript error occurred in the main process", followed by "cannot read property TraceLog of null".  I know this has been reported a number of times with previous versions and I've tried the C++ suggestions but nothing is working, any assistance would be appreciated. Thanks

Dear All My  FAPU431F wifi deplyoment only deliver 75 Mbps throughput (test with iperf3) while running in 5Ghz channel width 20 Mhz and 1 one channel (44 Mhz) from one client  connected (Windows 11  with notebook Intel i7) with 5 mtr distance for AP.Is this the FAPU431  best performance ? or is there any way to improve it ? Thanks #FAPU431

Hello Friends.I have followed the exact steps described in the below KB.The user is successfully authenticated to the SSID and is viewed on the Fortigate as a firewall user (#dia firewall auth list)I can see from packet capture that FG is sending the interm accounting messages to FAC on the specified period  and I see the ACC response packets from fAC in the sniffer. However, on FAC -- monitor --- radius sessions I see 0 accounting sessions.When I view user usage details : it is not counting anything and the user is not disconnected when reaching the max kilobytes specified in the suer profile. I am not sure what I am missing here. https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-Usage-Profiles-not-enforced-for-RADIUS/ta-p/198682  

Hello FNAC admins,So there is this part in the admin guide "Local management". Do they mean that you can access the network device and make changes from Fortinac without accessing the device (example : access a switch and add VLANs), like Fortimanager does with Fortigates ? BR,

Hi, has anyone here experienced an issue where the trunk port on a FortiSwitch running firmware version 7.0.1 does not work even though the configuration appears to be correct?We already verified the following1. VLANs are properly created and tagged2. Trunk mode is configured correctly on both ends (FortiSwitch and upstream device)3. Interface members are assigned to the trunk as expectedHowever, the traffic still doesn’t pass through the trunk link. The same configuration works fine when tested on a higher firmware version (e.g., 7.2.4), but it fails on version 7.0.1.If anyone has encountered this before or knows a workaround, insights would be greatly appreciated.