Fortinet Community

Dear Admin, I would like to change my name to Wittig Thanks.

We currently have a pair of FortiGates that would need configured for IPSEC Remote Access VPN.We have 2 separate ISP connections and active route is driven by BGP.Can you please advise what is best practice to configure HA for remote VPN clients and how can it be achieved?Currently, I have 2 separate VPNs off the firewall links configured by adding Secondary IP to the links.However I want the user to connect to a single VPN and dynamically connect to active one.We use VDOMs and current version is 7.2.If we do create a loopback, using the floating IP --> 100.100.100.100, which the ISP links secondary IP pointing to 100.100.100.101 and 100.100.100.102.Thanks 

I recently took the examination NSE4 FortiOS (today), and as per the instructions, I was expecting to receive the results immediately upon completion of the exam. However, I have not received any notification or confirmation regarding my results on Pearson vu platform and the exam status stills shows in progress .....During the exam I couldn't submit at the end as the time was up. I would like to know if the exam is automatically validated after the allocated time has elapsed, or if there is a separate procedure for receiving the results in this case

The FG-120G datasheet shows that its virtual domain has a default of 10 and a maximum of 10. It is possible to increase the virtual domain from 10 to higher?  

Hi guys, I am deciding to go for a cert but confused which one. I have always worked on Fortinet products. Never worked on Cisco routers and switches or any other vendor.I did went through a CCNA training then I got myself into a company where they only have Fortinet projects. So , question is should I go for CCNA or FCP(Formerly NSE4 ) ? or both ? Is CCNA even a good cert for me ? Currently I have 1 and half year of experience.

Hi all, Please find attached diagram where isp terminated on cisco router and interconnected links between router and fortinet configure with private ip address.  Furthermore will configure secondary ip [one of public ip] on fortinet same port which is connected to cisco router. Basically need to now how can i  configure site to site tunnel, explicit proxy and internet facing rule using that interfaces. 

Reset button on front doesn’t appear to be doing anything. Flashes really quickly on front.I can’t find my console cable either :’(

Fortigate 60D(v6.0.13) and FortiAnalyzer(v7.2.5) I'm having strange issue, Fortigate dashboard show two admins logged in - Admin (with my workstation ip ) and Admin (127.0.01). FortiAnalyzer system events for FGT60D show the following. Every hour there is a successful login.14:57:45 Administrator admin timed out on https(127.0.0.1) 14:47:46 Administrator admin logged in successfully from https(127.0.0.1) 13:57:22 Administrator admin timed out on https(127.0.0.1) 13:48:19 Administrator admin logged in successfully from https(127.0.0.1)   I have other devices with older and newer firmware, not seeing this issue for other devices, including 60D with older firmware. Any idea what is causing this and how to resolve this ?. Thanks.

I cannot locate any information on vlans in the Fortigate 100F datasheet. How many vlans 100F supports. Please assist in locating the solution.

We are considering migrating users from dialup SSL VPN to dialup IPsec VPN. Curious about best practices for optimum security as well as client ease of use. One question involves tunnel vs. split tunnel access. Is this an option when using IPsec VPN. Does all traffic go first to the FortiGate that the IPsec connection is made through, then to the web if the traffic is not local to the FortiGate?

Hello, I need to setup a rule that does this:I have a device with this IP 192.168.250.1 (it cannot be changed) connected to LAN I need to "associate"  IP 192.168.250.1 with a local IP 10.0.3.115.  So when the http://10.0.3.115 is opened the really IP 192.168.250.1 have to respond 10.0.3.115 -> 192.168.250.1.I guess 1:1 NAT and vrtual IP is not right way. Any hint about this? 

Hi, I think I have done something wrong but I'm not sure what was the fault. I have try to authorize a fortiap u421ev on a Fortigate 60D with 6.05 OS, and after I click on the authorize button the FGT tell me connecting and after that disconnected. The problem is that the FAP unit change the led color from blinking green in permanent white, and after this was happens the wan;t boot anymore, no IP in the network, nothing. I connected the console and he is booting in a strange mode. I did not found any specs about recovery. Please help with any idea. This is what is he doing when is booting after "reset" command.   u-boot> reset resetting ... U-Boot 2012.10.esdk.7 (May 25 2016 - 23:26:43 - root@fap-bcm-dev.fortinet.com) DEV ID = 0xcf1e PCIE CFG DEV ID = 0x8025 OTP offset(0x8): 0x78f01c01 OTP offset(0x9): 0xfe200818 OTP offset(0xa): 0xc01b0 OTP offset(0xb): 0x0 OTP offset(0xc): 0x4a00000 OTP offset(0xd): 0xffede230 OTP offset(0xe): 0x1035d17f OTP offset(0xf): 0x3406 NSP25 32bit D

I' m trying to deploy an HA pair of FortiGate-VM appliances under Hyper-V. Standalone they work fine, but as soon as I change HA mode to a-p or a-a, they lose network connectivity on everything except the cluster management port(s), and the cluster never forms. Changing HA mode back to standalone instantly restores connectivity. MAC addresses don' t appear to change, ARP works, but intermittently. I tried all kinds of virtual switches and vNIC settings, but nothing seems to help. I' ve reproduced the issue using build 5.0.6 on Windows Server 2012, and 5.0.7 on Windows 8.1, different host hardware as well. Am I missing some setting that must be configured to make it work?

Hi, i trying download backup a fortinalyzer but i dont see where is the option

Dear Members, can you support, the newly purchased Asus VIVO Book S (Snapdragon) laptop not support Forinet VPN service. while I used windows VPN service it connected but after

Hi,FOS  7.2.8I'm testing my SDWAN overlay link failover and it takes around 3 minutes most likely due to BGP holddown timer 180secs. I've tweaked the BGP timers based on the link below and It takes about 15seconds now for failover. Is there way I can have a failover of 500ms, what timers should I set? Facilitating the fastest BGP route failov... - Fortinet Community Appreciate your feedbacks. Thank you :)

Hi Everyone,I've set up SAML for our SSL VPN, and it's working well. However, I need to restrict access to only domain-connected laptops. Is it possible to achieve this using SAML? If so, could someone guide me on how to configure it? Thanks!

After upgrading from FortiOS 7.4.4 to FortiOS 7.6.0 on Fortigate 100F I cannot modify an interface by GUI because of the following error message:"Invalid DHCP range. Start address is greater than end address."The interface IP address is 192.168.68.2/23 manual mode and DHCP range is 192.168.68.100-192.168.69.254 with subnet 255.255.254.0. On the other hand, I can modify its configurations in CLI. Have no idea what's wrong here?

Hello,Having the following error with FortiClient 7.0.0.0022 apps for MacOS. Connection was terminated unexpectedly. Error -111Thanks to advise.

HelloI have FortiGate 100F I use only one LAN Network 172.20.0.0/16  (PORT1)- clients and servers in same range can I block ping between clients and servers IPI know by create VLANS I can solve this problem but I need to know if there is any way to solve this problem 

Why am i getting this error when i have logged in into forticlound"{"result": {"retval": -5, "message": "Local signin is not available in EMS Cloud"}}

Dear all, I wonder what is the use of the "authoritative" for Fortigate DNS Proxy? Is that feature just stopping users from IP changed with the same Domain name? Thanks!  

Dear all, We get the "problem with SSL comm layer" when try to add FortiToken to my FAC.  We confirm thatwe can ping "fortitokenmobile.fortinet.com" without any SSL inspection here.  Thanks, please advise!  

Recently, mac OS 15 (Sequoia) was released, and I would like to know if Forticlient 7.4.0 version will work normally on that OS.Looking at the Document Library, I still only have mac OS 13,14.Unfortunately, I can't test because I don't have a MacBook.If anyone is using Forticient 7.4.0 for macOS 15 (Sequoia), please replyThank you.  

I have some unused FortiTokens in one of my FortiGate devices, and I want to transfer them to another FortiGate device. How can I do that?