Fortinet Community

Currently, the FortiGate 60F is experiencing an inconvenience when there is an electrical power outage and the equipment starts operating using the UPS.When the power change is produced, the FortiGate apparently falls down and stops allowing network traffic, both incoming and outgoing.The way it has been used to restore the service is to physically disconnect the FortiGate and reconnect it to electrical power. After carrying out this procedure, the equipment normally starts correctly and allows network traffic again.However, on one occasion the FortiGate did not start correctly even after disconnecting and connecting it again, which increases concern about the cause of the problem.

Hi, Has anyone had any luck getting FortiClient vpn working on Tahoe? so far iv had 0 success .All windows based clients work fine however

Hello everyone! Recently we upgraded our Fortigate (120G HA Active-Passive cluster) from 7.2.11 to 7.4.11, and different problems started to occur.Some users spontaneously lose access to the Internet with ERR_TUNNEL_CONNECTION_FAILED (we use explicit proxy with Kerberos authentication and deep ssl inspection). It happens at random times and with random users, lasts usually up to 2-3 minutes, then works as usual.FortiGates started to randomly reboot with the message "Fortigate had experienced an unexpected power off!", there's no CPU/RAM issue, usually mem is around 40%, and proc is around 10-12%. Due to fast HA failover users don't feel the interruption, but it's definitely not a good sign. Before the update both NGFW had worked for 367 days.Anyone experienced similar issues? Any workarounds? Or should I just be rolling back to 7.2.11?Any advice and help will be appreciated. Thank you in advance!

Hi everyone,I’m planning to migrate from SSL VPN to IPsec VPN. Here’s the situation:The FortiClient app is already installed on users’ devices, and I need a way to deploy the IPsec VPN profile to those devices via Intune (all devices are managed by Intune).I’m currently using the VPN-only version of FortiClient, and as far as I know, deploying VPN profiles centrally requires an EMS license.Could you please advise if there’s any alternative solution in this case?Thanks

i have newly created VIP rule to publish local microsoft dynamic test server to the internet to access anywhere, but the vip rule not hit any packets.attached the rule screenshot and policy, any help from the community team would be appreciated 

I have a VIP IP address defined on my Fortigate Firewall, and I'm using Cloudflare with a proxy enabled. When I log the source on the firewall, I only see the Cloudflare IP address. Is it possible to see the incoming VIP traffic as if it were the real IP address?

Hi,I would like to know if anyone else is experiencing similar issues with FortiEndpoint EMS Cloud and the integrated FortiEDR feature.Our environment is currently running:FortiClient EMS Cloud: 7.4.7 build 2194 (Mature) FortiClient: 7.4.7 Windows 11 25H2: Build 26200.8875 FortiEDR Engine assigned by EMS: 5.2.8.0044Originally, we noticed that some endpoints using the same EMS policies and profiles had FortiEDR working and connected, while others showed FortiEDR Disabled in FortiClient and Disconnected in FortiEDR Cloud.Both working and affected endpoints are operating in the same environment and network, which makes the different behavior seem questionable. We are also seeing the same issue on endpoints in customer environments, so it does not appear to be limited to a single device or network.We also tested multiple FortiClient versions, including 7.4.4, 7.4.5, and 7.4.6, but the behavior remained the same.On affected endpoints, the Collector reported:FortiEDR Detected incompatible ma

I am currently using MACOS Sonoma when I use FortiClient and connect to the client but I have no access to my internet. I even tried using the router to add a new wheel and nothing worked I can't ask the client to change their settings outside. I need a solution I saw a video on the internet saying that Sonoma has a VPN problem.   Link youtube: watch?v=F60PBFlhjMQ&t=30s   But is it really Sonoma?    

So, MS Surfaces and Forticlient VPN have been one of my Nemesis' at a specific site for a specific user. Previously when we upgraded his Surface Pro a few years ago, when he'd connect via SSL VPN, internet connectivity would slow way down, at that time we were using the free Forticlient and got permission from Fortinet to get a trial version of the paid client to see if issue was FC related.  After a lot of back and forth, the issue was resolved and I and the user was happy.  I am going to review that ticket again and make sure there wasn't some kind of work around put in place that may be affecting this. Fast forward to the beginning of June, we replaced his Surface and used our typical tool (TransWiz) to transfer his existing Windows profile to new machine, he was happy.  A few days later I get advised that when FortClient Free VPN is connected ALL internet traffic that's not across the link stops, example if I have a remote session with him I loose connectiv

I have a brand new out of the box Fortigate 90g.  I’m setting it up, and I get to Network → DNS, and I enter Comcast’s DNS servers (Since it’s on a comcast line).  The firewall immediately says the IPs are unreachable, however, I also told the device to run a dhcp server, and hand out comcast dns as the dns on the leases.  The clients are fine, they can resolve addresses all day, no problem it’s something with the fortigate itself, it can’t “use” these addresses.  It’s also saying it’s unable to connect to FortiGuard servers for support info.I tried doing the execute ping command from the cli, it dropped a few packets at first, then was 100%. Is there some filter or something I should turn off (web filter on the WAN interface, maybe? ) that’s causing this?  the IP addresses I’m using are 75.75.75.75 and 75.75.76.76 thanks.

dear mam/sir, i need to upgrade the firmware of the fortinet this is my client’s fortinet to repair fortinet i want firmware of FWF40C3912006020 fortiwifi -40c  thank you Tejesh Maharjan

Hello,We are moving store suites and AT&T is changing their IP address.So we need help updating the new IP address configurations.The move occurs this Saturday, 29th at 5 PM PST.Can we schedule a time to make changes? 

We have a FortiGate-VM running on a trial/evaluation license that expired on July 2 (about 2 months ago). We're planning to deploy a new FortiGate-VM instance (same IPs) and push the existing configuration backup to it, then license the new instance properly.Is it possible to restore a config backup taken from an expired trial VM onto a newly deployed VM instance with a different serial number?

My FortiGate 100F, has been damaged by lightning. We have purchased a new FortiGate 100F. We want to transfer the license (2 years subscription) from the damaged FortiGate 100F to a new one FortiGate 100F. I wanted to transfer the license directly, but unfortunately I have already registered the new FortiGate 100F on my account, so I can't transfer the license.Can anyone help me?Many thanks.

My customers are can connect our VPN using their Windows PCs, Android Phones , MacOS PCs successfully. iPhone users also were could be connecting but for a while, I guess after latest update on App Store, they cannot connect to our VPN.We have a custom TOTP authentication server with Radius.All the other FortiClient VPN users on other devices still connecting , and also we have not changed anything in our Forti or Radius.Just Apple iPhone FortiClient VPN users cannot connecting. 

Hi EMS adminsOn EMS 7.4.3 I was able to configure NTP via OS config files (chrony).But on 7.4.4 there is no access to sh/bash and I can't find anywhere some command to set it up with emscli.In emscli cmd ref I just found this command but nothing said about setting time server.https://docs.fortinet.com/document/forticlient/7.4.4/ems-cli-reference/239339/execute-timeAny useful info would  e appreciated.

Hi everyone,I’m looking for some answers and a quick sanity check on my technical interpretation of the FortiGate 120G datasheet. I am currently evaluating this model against specific project requirements and need to be absolutely sure about how the performance metrics translate in a real-world scenario.Here are the requirements I'm looking at and my interpretation of the specs. Could you guys confirm if my line of thinking is technically sound?1. Requirement: SSL Inspection (DPI) throughput of at least 2.5 Gbps (HTTPS decrypted with IPS and AV enabled) My interpretation: The official FG-120G datasheet lists SSL Inspection Throughput at 3 Gbps and Threat Protection at 2.8 Gbps. According to Fortinet’s enterprise mix methodology, Threat Protection is measured with Firewall, IPS, Application Control, and Malware Protection (AV) simultaneously enabled. Given the cascaded processing architecture of the SPU (SP5 chip), my logic is that the resulting throughput for decrypted HTTPS traffic su

Hi, would like to ask if the forticare license can be purchased regardless of fortigate version, if there is no some constraint while making the order in base of the device model/version? Many thanks 

I have a Fortigate-400E and a 4G Router. About the 4G RouterThis router has an IP address of 192.168.x.x. To get internet access, all I have to do is plug in a LAN cable from the 4G Router to a PC. That simple. About the FortigateThis firewall has a 10.10.x.x IP address range. My QuestionHow do I set the 4G Router to the firewall? Right now I have plugged in a LAN cable from the 4G router to firewall physical interface 10. What configurations do I make? Do I change the role of the interface to LAN or WAN? What else needs to be done? Create a VLAN? Once this part is done, I can create a policy, that part I is not a problem. Could someone provide a step by step configuration guide? It is so simple without the firewall but I have no clue how to get it done thru the firewall.  

We are attempting to run the following on my 70G but it is returning the following error. I was wondering if there is something we are doing incorrectly to try and enable the fips-cc mode. Any help would be greatly appreciated.  FortiGate-70G # config system fips-cc FortiGate-70G (fips-cc) # showconfig system fips-ccendFortiGate-70G (fips-cc) # set status enablecommand parse error before 'status'Command fail. Return code -61FortiGate-70G (fips-cc) # 

Hi,I have the first time the issue that the Fortigate is not Responding to snmp Request (tested v2 and v3)Monitoring worked for 2 weeks, since today the fortigate is ignoring the snmp,Ckecked that the Fortigate receive the snmp requests Interface has enabled snmp added also a local in policy to be sure that the monitoring server can reach the demon debug of snmpd show also snmpd: trap (1003) masked for “user” also debug flow shows - monitoring Server to Fortigate (correct ports) and iprope_in_check () check failed on policy 0, dropso i am sure that the config is correctHas someone also faced a similar issue?

Is there any temporary extension, grace period, or interim support option available for our FortiGate 100E while we are waiting for the FortiGate 120G delivery? Can Fortinet verify whether there is an active order for the FortiGate 120G through our vendor or distributor and provide an estimated delivery status? Is there a Trade-Up option available from our existing FortiGate 100E to the FortiGate 120G? If a Trade-Up is available, can any applicable services or remaining entitlements be transferred to the new device?

Hello, I need your consultation and help. I want to install FSSO AGENT on my AD server so that Fortigate can see users. There are several installation options for this program:FSSO_Setup_5.0.0289_x64.exeDCAgent_Setup_5.0.0289_x64.exeTSAgent_Setup_5.0.0289.exeCould you explain the differences between them and which one is best? Also, if successful, how can I use web filtering to prevent users from accessing specific websites?#FortiGate 

New customer here. We are testing always-on IPSec VPN (split tunnel) on macOS 26 Tahoe.I have all the recommended MDM profile payloads deployed to my test Macs (SEXTs, TCC/PPPC, Notifications, Content Filters, Login Items, etc). But Im still seeing a couple issues, including these 2:1 ​How do I suppress this user-facing pop-up: "FortiTray" Would Like to Add VPN Configurations All network activity on this Mac may be filtered or monitored when using VPN.2 Once approved (which is required for some reason), a virtual ‘VPN’ interface is INSTANTLY created in macOS Network Settings. Yet this interface is literally unusable, and never becomes active. And users are able to remove it manually if they so desire (i.e. it’s not locked). If a user does NOT allow this VPN, this pop-up will appear persistently until action is taken.How can I remove this pop-up and related interface? I dont want end-users to see this in the UI since it isnt ‘real’ and will just lead to confusion and frustration.See (2)