Fortinet Community

Hi, I am trying to authenticate the passive firewall via Radius for management purposes. I have setup as per "Active-passive with external and internal Azure load balancer (LB)". Active and passive firewall has dedicated HA management interface configured with dedicated ip  active firewall and passive firewall have the same radius server configured .   On my radius server I have two clients.  One is the active firewall and the other for the passive. I can authenticate the active firewall without any issues on its ha management ip.  However, the passive firewall was not authenticating with its its ha management ip. But strangely it started to authenticate with its HA management ip. Is this possible? The RADIUS server  does not ping from passive ha management  interface. Routing table is blank on Passive firewall that means no reverse route to RADIUS server, also in GUI the RADIUS server connection status is " Error checkin

We have been using Fortinet technology since the beginning of last year. However, I recently encountered an issue with my FortiSwitch. The switch is receiving power, but none of the ports are functioning, and only the power LED is blinking. The switch is connected to a Schneider APC UPS rated at 3000VA/2400W. I have performed a hard reset, but the issue persists, and the switch has not recovered.Could you provide any insights on what might have gone wrong with the FortiSwitch? power outage??

Dear all.   After upgrading to version 7.4.4 we experience massive performance and handling issues. Can anyone of you confirm this?   What I can see among other things are the following facts:   When adding new entries to an already existing address group the entries in the group are sorted alphabetically the entries on the right which I want to choose are not. They are sorted by creation. So new entries are at the end. When adding new entries to a already existing address group the entries on the right I want to add are only loaded when I scoll down and this takes very long. It is like only 30 entries are loaded and the others are not. They will be loaded only when I scroll down to the end. We use hundreds and thousands of entries and the scrolling for new created entries takes minutes now and not only 1-2 seconds like in version 7.4.0. In 7.4.0 just all where loaded directly and I was able to scroll down to the end immediately. The country database in order to block I

I'm having trouble trying to figure out how to add tagged and untagged vlans for my fortiswitch 108F. Is i something to do with native and allowed vlans, or something with trunking? I don't fully understand it 

Dear Fortinet Community. I would like to go on hardening our SSL VPN access by using Client Certificates and I have several questions for my understanding that I cannot explain myself as I have no test environment and so I thought... Why not ask the professionals here in the forum that helped me in the past perfectly. :) Our environment:Fortigate (newest update installed)SSL VPN in tunnel modeFortiClient VPN will be used for SSL VPN connectionsUsers will authenticate via Active Directory (LDAP Server) What do I want to do? I want to enable Client Certificates. See here in the picture from Fortigate Demo Access:So what are the prerequisites for such a Client Certificate? These are my questions for understanding. Is the client certificate only connected to the server certificate used for SSL VPN?Can the client certificate be a certificate from another/internal root CA that we use internally from a Windows environment? And if so, does the server certificate must be iss

Dear Fortinet Community. We have upgraded our Fortiagte 100F from version 7.4.0 to 7.4.4.After that when I open the configuration of a SSL VPN Portal the following error message appears on the top right corner: this.portal.$schema.children is undefined.It looks like this:Has anyone of you ever experienced such an error message or probably know a solution for it? it always comes again with every portal we have defined. it dissapears if I close the error message but comes back when I restart my browser (cookies deleted etc.). Any answer or hint is much appreciated. With kindest RegardsFortiLover :)

Dear Fortinet Community. I have a question regarding the creation of triggers when it comes to a violation against our Application Control. Means we have blocked a specific Category in the Application Control settings. And if a person wants to use this Application from the category it gets an answer (shown as webpage while surfing) from the fortigate that the use of this applicaion is against internet usage policy. It looks like this: Now I would like to create an e-mail notification via Security Fabric -> Automation. I cannot find a trigger for that event. Can anyone help me to setup such a Stitch or Trigger? Model: Fortigate 100FVersion: 7.4.4 With kindest regardsFortiLover

Dear FortiNet Community. We use AutoDesk AutoCAD Version 2020. When we start the program it cannot start and tells us that it needs an internet connection. I have found out that it works when I remove antivirus scanning from the firewall policy rule that refers to internet connections. Have you experienced a problem like this? FortiGate does not have so many settings within the AntiVirus profiles... I have tried alot now. But it is always the same. The software works without AntiVirus Security profiles but not with. Has anyone ever experienced something like this? With kindest regardsFortiLover

Hi guys, I'm looking for an identity management solution and would like to know if FortiAuthenticator can monitor and prevent authentications from another country that a user is supposed to login from. Thanks.

Dear Fortinet Community. We have upgraded our Fortiagte 100F from version 7.4.0 to 7.4.4. After that it seems so that users which we have defined to get mails for 2FA when connecting to SSL VPN will not receive emails with the 2FA code anymore. Other emails for triggers for instance still work. So it does not seem to be a mail account issue. But the emails with the 2FA code will not be sent anymore. I have created a testuser in order to check it. Mails will not received and they are not in SPAM or Quarantine or so. Does anyone of you have ever experieced this? Or probably know a solution for this circumstance? Any answer or hint is much appreciated. With kindest RegardsFortiLover :)

Hi FG-OT adminsIn OT security study guide, page 39, Asset Identity Center,When we organize the devices in their corresponding levels (Perdue Model), does it actually have any added value on how the traffic is filtered or how it is monitored or whatever?

Hello. We are planning to implement #FortiPAM through a Korean vendor and have a few questions regarding its compatibility with custom applications. Our network environment consists of separate IT and OT (Operational Technology) networks, controlled by firewall. While we understand that #FortiPAM can easily register and manage known applications and ports (such as MS SQL with port 1433), we're curious about its capability to handle custom-developed, private applications. Specifically:Is it possible to register and manage custom-developed applications in #FortiPAM, similar to how we would with well-known applications?We have a use case where a user in the IT network has developed an automation program to retrieve and analyze data from the OT network. Can we register this custom automation program in #FortiPAM?If custom application registration is possible, can we also specify and manage the specific ports used by these applications through #FortiPAM?Are there an

Hello Forti Community, we are currently testing FortiClient EMS and we have the problem that all our clients are listed under Endpoint Alerts as Out of date, protection. But the problem is that the AV signature on the client matches the current version on the EMS but they still are listed as out of date. For example, current AV Signature Version: 92.07438, New AV Signature Version: 92.07438. We are using EMS 7.4.0 and FortiClient 7.4.0, the problem occurs on Windows and Linux Clients. Any ideas on how to fix this? Thank you in advance for your help.

Hello everyone If I have 2 FortiGate configured as HA and  each one has independent ISP, how I can make it exchange roles when the service is down in one of them (not physical failure) 

Hello!I am Jonathan Alexander Escobar, and I am reaching out as a new user of the Fortinet platform. I require assistance in setting up an alert to notify sudden power outages. Could someone please provide a detailed, step-by-step guide to configure this feature?Thank you for your supportSincerely,Jonathan Alexander Escobar

Hello all,The past night Forticlient 7.0.1 update was pushed via EMS and now inside of Defender we are seeing multiple endpoints reporting that: Defender detected and terminated active 'Trojan:Win32/SuspServiceBin.A!cl' in process 'FortiClientSetup_7.0.1_x64.exe' It is also saying that:FortiClientSetup_7.0.1_x64.exe - 'SuspServiceBin' malware was detected and was active I know I can whitelist what I need to in defender, but I want to know if anyone else has come across this/seen this to get a better understanding as to why this would be. 

Dear team,I have DNS Filter configuration and have full license. But when configuring SDNS for fortigruad, I don't see the command to configure.Please help me, I am integrating remote access on DNS filter Thanks team

I have a problem with scans from the printer.same Microsoft user with same email and different IP addresses on 5 printers.The first two configured, one on port 25 and one on 587, work, the others don't and it appears on the utm allowed action TCP reset from client, does anyone know the solution?Thank you

Please give me some advice on what to do when FortiClient shuts down. The system we use runs a script on logoff and records the logoff time on the Server.However, when using FortiClient, the VPN session is disconnected before the logoff script runs, which prevents the logoff time from being communicated to the server. Is it possible to configure settings to delay tunnel disconnection during shutdown?

Good morning all,I am running into an issue where our Fortigate's firewall policy is blocking employees from logging into ticketmaster.com When they try to login they are met with a screen that says: Your Browsing Activity Has Been Paused We've detected unusual behavior on either your network or your browser.To resolve this:Sign in to your Ticketmaster account if you haven't alreadyChange your Wi-Fi or cellular networkSwitch devices or move to a different location if possible I have attemtped to add a policy rule that will stop all traffic from our lan to the wan with a destination of ticketmaster.com from being scanned by the various services, but it does not seem to fix the issue. Has anyone else ran into this? Or do you have another idea I can try?Thanks so much

hello everyone,I have noticed that the FortiAP U321EV if you force the power TX to the maximum power these do not deliver the desired power. We tried to static the power on the AP profile on the local AP but it doesn't work. We have upgraded FW from PU321E-v6.2-build0323 to PU321E-v7.0-build0031. But it still does not work. Has anyone had the same problem ?

Greetings, community. I hope you are doing well. I am trying to reach a Fortigate 80F through the LINKDDNS, but I am unable to access the device. However, when I ping the public IP and the LINKDDNS of the device, I do not experience any packet loss.

Hello team,  I have this error message : BGP: 10.10.3.2-Outgoing [DECODE] Open: Bad Remote-AS (64401), expected 64400 The neighboring is UP, and the traffic is flowing as well. However, I’m concerned if there might be any issues here.  Regards, 

Our recent vulnerability scan has pointed out we need to set timeout outs for:- console sessionsSSH HTTPSadmin services Looks like this has to be done through the CLIHave viewed some documents but is there a way to set them all to the same time? Thanks 

hi everyonei am newly trying fortigate firewall.. and lets say i am having a custom payment gateway to make invoice to customers (xyz.com) after i reach the site i cant log in and the screen showing white only nothing else and the browser keeps loading can you please explain why is that and how to overcome this My devive is : 40fFramework : v6.x Thank you