Fortinet Community

Hello, Is anyone aware if that legacy "scp -O" is going to be fixed soon by migrating to newer protocol or by a specific configuration? https://community.fortinet.com/t5/FortiGate/Technical-Tip-Backup-via-SCP-getting-error-subsystem-request/ta-p/253357

Hi Team, SAML authentication is not working. We have integrated Azure IdP with on-prem Active Directory and called the Azure IdP on the Fortigate Firewall. We are using SSL VPN and when we dial up the remote connection, its getting stuck at 40%.  Can someone help out on this.Thanks

Hello: I recently lost power to my FG-61E and it did not "come back up". The console scrolls the following error: ata1: exception Emask 0x10 SAct 0x0 SErr 0x41c0000 action 0xe frozenata1: irq_stat 0x00000040, connection status changed I performed a factory reset to no avail. Is my emmc fried? If so, should I even keep the unit? #diagnose hardware deviceinfo disDisk SYSTEM(boot) 3.6GiB type: EMMC [EMMC] dev: /dev/mmcblk0partition 247.0MiB, 152.0MiB free mounted: Y label: dev: /dev/mmcblk0p1(boot) start: 0partition 247.0MiB, 152.0MiB free mounted: N label: dev: /dev/mmcblk0p2(boot) start: 0partition ref: 3 2.9GiB, 2.8GiB free mounted: Y label: dev: /dev/mmcblk0p3 start: 0 # get hardware statusModel name: FortiGate-61EASIC version: SOC3ASIC SRAM: 64MCPU: ARMv7Number of CPUs: 4RAM: 1866 MBEMMC: 3662 MB(MLC) /dev/mmcblk0Hard disk: not availableUSB Flash: not availableNetwork Card chipset: FortiASIC NP6LITE Adapter (rev.) Thanks in advance

Hi,I have only 1 IP Public. I want to forward traffic based on source IP to specific Virtual Server.My scenario: - If source IP from 1.2.3.4 &1.2.3.5 hit my IP Public 5.6.7.8 with port service 800 will forward to Virtual Server A with real server 172.16.1.5:800 and 172.16.1.6:800- If source IP from 2.3.5.6 & 2.3.4.7hit my IP Public 5.6.7.8 with port service 800 will forward to Virtual Server B with real server 172.16.1.7:800 and 172.16.1.8:800I created 2 policies- Policy 1 with id 126Name: Service-800-Region-USIncoming Port: WANOutgoing Port: LAN172Source & Destination-----------------Source: 1.2.3.4 & 1.2.3.5Destination: Virtual Server A. Mapped From: 5.6.7.8. External Service Port: 800. Real Server: 172.16.1.5:800 and 172.16.1.6:800Service: Service800Firewall/Network Options---------Inspection mode: Proxy BasedProxy HTTP(S) traffic : disableNAT: disableProtocol options: default- Policy 2 with id 128Name: Service-800-Region-EUIncoming Port: WANOutgoing Port: LAN17

Hello Community, I have an issue with achieving active connection to FortiVoice located behind FortiGate Firewall using FortiFone, Below you can see the diagnostic report from FortiFone,  On FortiGate side, I created two vip rules forwarding traffic to FortiVoice, as shown below. Notice that I have 0 hits Then I grouped these rules under “VIP-Group”. And regarding the firewall policy I have created two policies as shown in image below, one to allow traffic forwarded from VIPs and one to allow internet access on FortiVoice.  I appreciate your guidance regarding this matter.

What is the issue? I can't find the issue. 

Hi FML expertsI know that FML sends some attachments for scan to cloud Sandboxing. I also know that some FML features may send embedded links, source IP, e-mail hashes, but not mail body, to FortiGuard to compare with FortiGuard DNSBL, SURBL and spam DBs.But is there any option in FortiMail antispam (or other profile) that requires from FML to send the email body to FortiGuard for scan?

The below code works for both a get or put and I get back status 200. the issue I have is that nothing in application-list or ips-sensor gets created on post or updated on put. If I create the policy then add the IPS and APP through the webui to something... and then run the put it doesnt update the values. In all cases I get a status 200. { "policyid": "{{ rule_id }}", "status": "enable", "name": "{{ rule_name }}", "srcintf": [ {% for iface in srcintf %} { "name": "{{ iface.name }}" }{% if not loop.last %},{% endif %} {% endfor %} ], "dstintf": [ {% for iface in dstintf %} { "name": "{{ iface.name }}" }{% if not loop.last %},{% endif %} {% endfor %} ], "action": "accept", "srcaddr": [ { "name": "100.119.64.0_24" } ], "dstaddr": [ {% for addr in ip_address %} { "name": "{{ addr.name }}" }{% if not loop.last %},{% endif %} {% endfor %} ], "service": [ {% for svc in service %} { "name": "{{ svc.na

I registered into forticloud and downloaded a fortigate image for gns3  after configuration I type the ip into the website and I put my email and password the page just keeps spinning no results even inside my fortigate conslole it keeps asking for the license untill it times out , I made sure to configure the dns server and I pinged the the fortiguard service and its working can someone help me am just soo lost   

I use a KVM VM v7.2.8 build 1639 in EVE-NG. However, this image has a port limit, limited to two ports.Versions below 7.0.x do not have this limit. In Forticloud, there are no versions below 7.2.x. Does anyone know how I can get a KVM VM below version 7.0.1?

Hi all, I need to set the volume for the ISP links in the SD-WAN zone from the Fortimanger.But although the volume option is there can not find options to set the values.Anyone know the way to do this ? 

I have a requirement to implement firewall to different customers, the firewall service ports remain the same but source and destination addresses will change for each customer. I would like to populate the addresses and services in an excel file manually. Is there any way to auto generate rules/configuration file from excel file so that I can import them on the new firewall. Is it possible to automate?

Hello all,I was enrolled in a university that had a partnership with fortinet regarding the forticlient vpn. When I switched universities I uninstalled the forticlient app (Mac user) with the uninstaller.Unbeknownst to me, both the app and the uninstaller were backed up in a back up before. That hard drive is now full and I am looking to remove older back ups, the one from 2023 with the vpn as well.I am unable to delete the forticlient app or the uninstaller from the back up drive, as both are protected and I cannot override that setting. I tried dragging the uninstaller back to my desktop (i.e. restoring it) however it doesn't detect the vpn as being on my Mac and now the uninstaller is stuck not only on the back up drive but on my desktop too.I've tried every internet solution I could find (dragging both the application and the uninstaller to the bin, right-clicking and clicking on place in bin, using sudo rm -rf), but none of these resolve the problem that I cannot delete these apps

Sorry, this might be a stupid question, but does the likes of the Fortigate 120G which has no hard drive, provide traffic logs and visibility? Can I log onto a box and see a host trying to access a website etc? Or would I really need Forti Analyzer for this and long term storage?I presume the 121G will log to the internal hard drive for and retain logs for a while

Hi, I have a FortiGate (FortiCare) license that has not yet been activated, so I’m currently unable to see exactly which services and features are included.I would like to know, in particular, which of the following types of logs the FortiGate is actually able to generate with the license I have: AnomalyAPP-CTRLDLPDNSEmailFilterEventFILE-FILTERFORTI-SWITCHGTPICAPIPSSSHSSLTrafficVirusVoIPWAFWebfilterI retrived this type of logs from https://docs.fortinet.com/document/fortigate/7.2.2/fortios-log-message-reference/1Thanks

Hi, I would like to ask if to generate logs of type "Anomaly" like for example 18432 - LOGID_ATTCK_ANOMALY_TCP_UDP, a fortiguard IPS license is needed for fortigate?

 hello guys i want this image please, fgt_vm64_kvm-v7.0.15.m-build0601-fortinet.out.kvm.qcow2 in fortinet page the oldest is 7.2 so i only want 7.0#fortigate 

Hello, this might sound a little stupid but pardon me I'm a newbie.I have 6 sites A,B,C... I created an ipsec tunnel from A to B, B is already tunneling to the other remaining sites my question is can i create a policy or routes or even configure the existing tunnels to redirect traffic or reach Vlans on the remaining sites behind B without needing to create an ipsec tunnel to each site individually from A. I have more upcoming Fortigates to configure and if there's a way this will make my life way easier as there's a ton of config to do other than firewall things.Thanks

Hello Everyone, I reviewed the demo https://fortiaiops.fortidemo.com/ from the demo center and from what I gather this is more for the switches and AP managed through fortigate with fortilink (FortiEdge)? For some other vendors Aiops is the place for misconfig or detected version vunrabilities on the Firewall. I think Fortimanager with Security Rating Service (cloud based forti service) can do this if I am not wrong and FortiAnalyzer can add extra layers for detection and reporting?   

I'm trying to connect two sites by two IPSec tunnels. Site A has 2 WANs and site B has single WAN.My example is exactly the same as in this technical tip:Technical Tip: Configure IPsec VPN with SD-WAN Document says:Configure the Peer end Device, if it is not already done (the normal Route Priority has been used at the peer side for failover, it is also possible to configure SD-WAN on this side using the above example).However, it does not work as expected if similarly create SD-WAN on another side because it creates circular dependency!  Whatever side selects best tunnel, it selects an active route for it. As result, another tunnel becomes unavailable for SLA on another side because SLA packets cannot return, and another SD-WAN disable this tunnel as well so first SD-WAN cannot measure SLA on this tunnel anymore. At this point, initially not selected tunnel quickly becomes blocked for ever. The obvious way how to solve this problem is to have SD-WAN only on one side, and

I am just wondering if someone can please explain in more detail how Forti (in Proxy mode) handles URL based filtering and Application control.I have tested the following with facebook.com:Block “social networking in webfilter and social Media is blocked in application control --> facebook is blockedAllow “social networking in webfilter and social Media is blocked in application control --> facebook is blockedBlock “social networking in webfilter and social Media is Allow in application control --> facebook is blockedIt looks like both options need to be allowed or have a exception for this to wokr. Is this how this is suppose to work? How would this work for lets say some fileshare rule : Do i need to allow this in URL filtering and then also in application control? Another example would be file sharing like google drive. Does this mean that one needs to allow the google drive url in url filtering and then block "online storage" in Application CASB but make an excep

Hey everyone, Does FortiNDR help with OT device classification when in FortiFabric? I know it helps with OT attack blocking but the docs are not clear about the classification part.

Hi Community  Is there any way to assign user wise data Quota and bandwidth limitation.  

 I would like to share only the most relevant security logs from FortiGate to a syslog collector, and I aim to minimize the volume of data being sent.For example I am interested in User Activity Events, but I would like to filter them further, for example, to include only admin login events.Is there any official Fortinet documentation that lists the subcategories or log IDs included in “User Activity Events”, describing their purpose and content?And more importantly:Is it possible to apply filters directly on FortiGate (e.g., using CLI) to export only specific subcategories within a log group?Any example or reference would be greatly appreciated.

Dear all,Could you please let me know which category the following logs:- Anomaly - APP-CTRL- DLP- DNS- EmailFilter- FILE-FILTER- FORTI-SWITCH- GTP- ICAP- IPS- SSH- SSL- Virus- VoIP- WAF- Webfilter  in FortiGate belong to, based on the categories shown in the image from fortigate GUI? I found this categories in the table from "Log Reference" section in fortigate guide. I can't understand for example the "anomaly" logs which category do they belog according to the fortigate list in gui (shown in immage).Thank you in advance for your support.Best regards,