Fortinet Community

Hello good morning a question, if I have a site to site VPN and my main segment is the 10.20.0.0/16 and my branches that connect is the 10.30.0.0/24, how can I do it so that all the branches can see one in particular the 10.30.14.1I thank you for the helpBEST REGARDS 

Hi, after updating the firmware of FortiAnalyzer to 6.7.0, I have an issue with the 'Log View' in the 'Incidents' tab. When trying to display logs assigned to a specific incident, they do not load. However, if I manually go to the 'Log View' tab, the logs are present there. Does anyone else have this issue as well?  

Hello,Just got a brand-new Fortinet setup.Tried to do EAP-TLS with computer authentication + LDAP + Company PKI.But can't get it to work, so went back to basic, and using FortiAuthenticator as CA and User authenticationI am getting this error: 2022-01-14T20:46:50.517025+01:00 FortiAuthenticator radiusd[19012]: (85) eap_tls: Verify User Kenneth (GUI user type: 0, id: 3) certificate binding2022-01-14T20:46:50.517384+01:00 FortiAuthenticator radiusd[19012]: rlm_eap_tls: Certificate binding check failed. (CN=Kenneth, Issuer=/C=DK/L=Viborg/O=HandbergIT/OU=IT/CN=fac.handberg.pri)2022-01-14T20:46:50.517642+01:00 FortiAuthenticator radiusd[19012]: (85) eap_tls: ERROR: TLS Alert write:fatal:internal error Have imported the user certificate in Local user certificate personal store. Do someone have any idea why?

I have a problem with a fortigate 40F (firmware : 7.2.10) I have a connection (LAN) in hardware switch, a second connection (LAN VOIP) in physical interface,an FTTO link connected to the WAN as backup and an FTTH in PPPoE mode The problem is i don't have internet (ffth and ftto) behind the LAN, i can't ping google, but i have internet in the LAN VOIP, i don't know why this doesn't work, my policy rules are good. If i configure my lan in a physical interface and replace the policy rules with the good interface, it's work. do you have any idea where the problem is coming from ?

Hi,I am trying to connect my Fortiweb Manager to a new Fortiweb installed at a client.The two devices see each other, the local user created on the customer's fwb dedicated to hookup is ok; but on "onborading" I get this error:Failed to connect to FWB device       Is it possible that this error is caused by the fact that the fortiweb in the client home has not yet been licensed ? ThanksFortiWeb #FortiWebManager

Hi All, I am trying to download the FortiClient VPN using the link in the downloads page:https://links.fortinet.com/forticlient/win/vpnagent But it's broken.Does anyone know of a workaround? Thanks.

Hello, We are running ForitMail 7.2.0 in gateway mode with multiple protected domains using LDAP auth for recipient based policies. Is there a way to consolidate all the bulk folders of a single user that has multiple aliases in multiple protected domains? For example we have:primary mail attribute:user1@domain.comproxyaddresses:user@domain.comuser1@differentdomain.comuser@anotherdifferentdomain.comThis would lead to 4 separate personal quarantines 2 of them being in the same domain, rest different domains:user1@domain.comuser@domain.comuser1@differentdomain.comuser@anotherdifferentdomain.comIs there a way to consolidate them into one single personal quarantine, so we can see all bulk folders without having to log into each of them separately? I know there is a way to configure secondary accounts for each user, but it requires a lot of micromanagement and it isn't very user friendly.  Has anyone faced this issue before?

Hi All,I have a fortiswitch 108F-POE, when I connect it to fortigate 60f (v7.4.3) using fortilink port, it will disappear, after disconnect it from fortigate, it will show up in managed page, I don't know why ? Thanks.

Hi there Is it possible to setup the Fortianalyzer for multiple tenants ? Any information/advice on how to do this ? thanks ggntt

I recently work for an organization and I saw some network with policy 4294967295 which does not exist in the list of policies. I am confused why some networks work with this policy if they do not exist in the list of policies!Does anyone have experience in this matter?    

I need to set up failover on a Fortinet 40F at my branch office. The branch is connected via two VPN tunnels: DSL VPN and VSat. My goal is to prioritize the DSL VPN link and switch to VSat in case of DSL VPN outage. I'm new to Fortinet and need guidance, noting that I'm not using SD-WAN but rather static routes.

delete post

HI , I recently got into firewalls,  I have Fortigate 200F, I want to do SSL-offloading with  it if possible ?my question is , is it possible to do it with Fortigate and if yes , then what makes it different from Fortiweb ? when i can offload traffic on my Fortigate and inspect it ? 

We are fighting an issue with Forti Client 7.2.5  We got a Malware/Virus detection on following files (multiple clients):  Malware: FSA/RISK_HIGH found in C:\Windows\WinSxS\wow64_microsoft-windows-recover_31bf3856ad364e35_10.0.19041.1_none_465905a4885947e8\recover.exe by realtime scan. The file was quarantined.  Malware: FSA/RISK_HIGH C:\Windows\WinSxS\amd64_microsoft-windows-wmpnss-ux_31bf3856ad364e35_10.0.19041.1_none_6db5d09458d426f5\wmpnscfg.exe by realtime scan. The file was quarantined C:\Windows\SysWOW64\recover.exe by realtime scan. The file was quarantined.  Malware: FSA/RISK_HIGH found in C:\Program Files\Windows Media Player\wmpnscfg.exe by realtime scan. The file was quarantined. After runningSFC /scannowDISM /online /Cleanup-image /ScanHealthDISM /Online /Cleanup-Image /CheckhealthDISM /Online /Cleanup-Image /RestoreHealth the problem disappeared on one client, but is persistent on another one. I have opened a ticket (TAC) and t

Hi,I hope everyone is doing well. we are trying to configure the voice VLAN for the whole network in cisco switches everything is simple I finished the configuration but am having a hard time trying to research about ForitSwitch command or GUI to set up the voice VLAN can I get any documentation or some brief explanation on how to configure it via GUI or CLI would really appreciate it .

First my environment is on Huawei cloud, I have fortigate FW connected to VPC1, and VPC2 connected VPC1.VPC's subnets:VPC1: 10.0.0.0/16VPV2: 10.1.0.0/16I have created VLANs on firewall that matches each subnet on VPC2, for example I have a server connected to VPC2 with IP address 10.1.1.100, so in firewall under my LAN interface I created VLAN interface with subnet 10.1.1.0/24static routes have been created on Huawei from VPC1 to VPC2, and vise versa.static routes have been created on Firewall to communicate with VPC2 through VPC1.With my current configuration:I have access to server connected to VPC1 through VPN, but not to VPC2 server (note that I only have access to VPC2 servers using VPC1 server).I don't have ping to servers on VPC2 from firewall.I can access FW from VPC1 and VPC2.Both VPCs have access to internet (traffic is passing through firewall)What do I need to let the VLANs communicate with the subnets on the switch?

Good day, I am trying to set up Outbound firewall authentication with Microsoft Entra ID with SAML following the process in the link below but it's not working, when I open a browser I am not requested to log on. I have double-checked and my setup looks good I thought the guide may be wrong, my first question is do you need to enable Capture Portal on the Lan interface as the guide does not say to do this? Also, I am setting this up because I want to authenticate Entra Only Windows computers so not sure what the "User Attributes & Claims" should be? users log in with their email and password so assuming I should add the email as an option? Can anyone help or is there a better guide to setting this up for Entra Only joined Computers? https://docs.fortinet.com/document/fortigate/7.6.0/administration-guide/33053/outbound-firewall-authentication-with-microsoft-entra-id-as-a-saml-idp ThanksJulian

i need to create named address for IPSec tunnel so that i can have 2 subnets 172.25.0.0/16 and 172.26.0.0/16 to go through the tunnel. but i cannot seems to be able to add them.is there any limitations ? 

Hi, What is the correct way to create IPSec tunnels when the head office has multiple WAN interfaces, while the branch office has only one? Should I create two tunnels in the Head Office? Thanks.

 Hi all, I have some question regarding the routing in FortiGate here. I have attached the topology here for better understanding. I only have a control of ID FortiGate and cannot see the configuration on Azure WAN and other Head Office. Current condition is in the green box, all Head Office FortiGate has IPSec tunnel to Azure WAN, and I think the Azure WAN is responsible for the BGP routing to all other Head Office. From ID Head Office, I can connect to TH Head Office and JP Head Office. Everything is working well. So, I have a new Branch office in ID. I can create the site-to-site VPN between ID Head Office and ID Branch, but the problem here is to connect the ID Branch to TH Head Office or JP Head Office via ID Head Office. Does anyone ever have this kind of configuration and can give me suggestions about how to configure it? Thank you.

Hi this is what I see when I try to login to non-licensed version: 6.2.0-6.2.3. Any idea what is it? When I click "close" nothing happens   Hubert

MY fortigate ssl vpn setting for saml  use port number 443 ,current   iphone fortinet vpn upgrade   to 7.4 happen issueerror message  => " VPN Erroe : unable to get sso portIs there any solution? 

Hello,I want to access the web mode SSL VPN both from the LAN and WAN, but I get the same error on Safari. It is updated to the latest version, Sequoia 15.0.1, as well as on iOS and iPadOS. It works perfectly on Firefox or Chrome. In the Fortigate logs, the following error appears.What can I do to fix it? 

Hi all, we have recent connectiosn issues the last days at our customers with Apple iOS devices . I found out, that iOS Clients with updated Forticient 7.4.10145 has the issue. After some test with try and error i found out, that you have to specify the Port even in the Server Address to get it working again (Even in VPN Realms). This was not necessary in erlier versions of the forticlient. i could reproduce on a device with an older Version where the VPN is working. After upgrade the client it is not working, till i set the POrt also in the Server Address. Has anybody else the problem? If you use the server address https://"ssl-vpn-address.com":443/realm it ist working, even if you specify the Port in the "Port" settings