Fortinet Community

Can FN-TRAN-QSFP28-BIDI or FN-TRAN-QSFP28-BIDI-I work with single-mode fiber?

Dear Forti Support I am writing to you because my Fortigate VM02 yesterday presented an unexpected increase in CPU resource of 97 - 98% for almost an hour, this event generated denial of services and intermittency and slowness on the internet. During the event, there was no significant increase in memory, concurrent sessions or sessions per second, no intrusion attempt, nor any adjustments made to the hypervisor. InformationFORTIGATE VM02v7.2.8 build1639 (Mature)Hipervisor: OVITR (based in KVM)  I appreciate your comments and help 

I have a issue in NAT, one of our customer we are connecting with ipsec vpn its used for printing we gave seprate segment to this IPsec For internal from that internal segment we are NAT to one of the operation segment. In remote end (customer) they have some servers and given the ip address which i have added in the remote segment in our ipsec tunnel in this case i do able to print from one of customers iP to our end successful but from other customer server to same end user ip its cannot print please advise us #fortigate 100F @gowtham

after set vpn ssl user and password in forticlient from end device OS windows 10-home or 11-home certificate pop up didn't appear and no traffic is no received by fortigate 60F os 7.2.7 but throughout web mode is allowed to log into vpn successfully. 2nd issue is throughout web mode, using FTP quick connection didn't allow to reach root folder, this location is reachable from another windows os vpn clients through vpn client app directly 

Hello, I am facing an issue on DM after Guest self registration on a port used with dot1x the vlan never get changed. The capture of Disconnect-Request :The Disconnect-NAK :  After shut no shut the port, the correct vlan get applied, do i need to apply cli configuration with port bounce as a workaround ? any other options ?@ebilcari Thank youRegards! 

After we upgrade from version 7.4.1 to version 7.4.3 we are facing a lot of problems with memory leak.The memory starts the business hours with 65% and increase during the day, in the other day start with 71%, the other day starts with 75%.... Always increasing until the moment we have to kill the process to not enter in conserve mode.We made the upgrade to version 7.4.4 last week, but the problem still persists.We have a HA cluster active-active, model 1101E.

Hi Experts,I'm using FortiGate 80E with firmware version 7.4.1 for my network. I have an Asus RT-AC88U as access point for my wireless access. My carrier Wifi Calling not getting enabled on our mobiles. Is there any specific port or services that i need to enable on Lan to Wan policy? Kindly guide me. Thank you.

I am new to FortiGates and need a little configuration help. We have two FG200F's at our datacenter as the firewalls and some remote sites that are using FG40F's and are connected via VPN. What I want to do is have two WAN's, one as primary and one as a failover. I need all traffic that is destined for our network that is traversing the VPN to swap VPN's in the event of a fail over. Not sure how that configuration looks.Current set up is 1 WAN to remote site, VPN connect back to our network.

 Hello everyone! I'm newbie and I have a question about the SSL VPN on Fortigate. I'm using a 501E for the DMZ zone, I config SSL VPN with Mac host check following this guide: https://kb.fortinet.com/kb/documentLink.do?externalID=FD41648 and It works fine with windows and MacOS. The Forticlient send MAC of the device to the firewall so only the specific device can connect to the tunnel.But the problem is on the iphone device ( I'm using IP XR with IOS 13) the Forticlient doesnt send MAC to Fortigate so It cannot connect to the tunnel. The IOS LOG is attached, please kindly review it for me. Thanks a lot!  

olá,sempre ao meio-dia, e minha rede interna fica lenta, muito lenta.Alguém tem alguma dica de por onde começar a procurar pelo problema?

Good morning, My name is Daniele Milani and I am the Tech Sales Leader of Ermes Cyber Security, an Italian cybersecurity firm. In order for our browser protection to operate, we need to communicate with a desktop application, and we do so through native messaging (https://developer.chrome.com/docs/extensions/mv3/nativeMessaging/). Unfortunately, the Forticlient Anti Exploit module marks that communication as malicious on chromium-based browsers, as evidenced by the log line below.msg="AntiExpoit has detected violation" action= ae_api=CreateProcess ae_reason="Run payload in protected process" app="C:\\Program Files (x86)\\Microsoft\\Edge\\Application\\msedge.exe"msg="AntiExpoit has detected violation" action= ae_api=CreateProcess ae_reason="Run payload in protected process" app=C:\Users\username\AppData\Local\Google\Chrome\Application\chrome.exe Could you kindly mark this detection as a false positive? Thanks so much,Daniele

Hi Team, I have Fortigate in HA. I shut down one chassis and was running it as standalone for some time. During this time i upgraded active fortigate with 2nd chassis shut down. Now i want bring up HA but my 2nd chassis is on older version. My question is:Do I need to break HA and upgrade 2nd chassis separately before connecting in HA again?Or it will be get updated automatically if i power on?

Hi Everyone, We have a Expiration notification and would like to ignore it like the others.Looking at: Operational Technology (OT) Security Service Expired (Expiration Date: 2024/02/12)As you can see in the image, it has been more than 40 days since the expiration and is showing as an Error instead of a Warning. We have done updates and reboots. I couldn't find a solution online.Could anyone point me in the right direction? Version 7.4.4Serial: FGT80ETK18011906 

Hi! I would like to ask why my firewall policy reflects only on my phone and not on my laptop, even though they’re in the same group (Semi-restricted) that I created. I blocked or restricted some websites using their MAC addresses, but the restrictions only apply to my phone.”

I have an AWS external Alb which forwards external traffic to a pair of fortinets. There are a no of websites hosted on this load balancer each redirecting via a diff port. to these fortinets. Each target group of lb is sending a probe on 8008 to fortinets.I created a new target group with similar probe but the lb health check for it is inconsistent and keeps on failing and randomly coming up..due to these fluctuations my externally published url is getting affected and is accessible intermittently...do I need to add anything else in fortigates to enable the new target group probe ? Pls assist  

Hello everyone,I am currently finding a method to block file transfers in Skype. We typically use Skype for internal communications, but we want to restrict any form of file transfer within the application. All users are currently using Skype for Desktop, version 8.125.0.201.On research, I found that there is no direct method in Skype to achieve this. So we thought of achieving this using the firewall rules. https://community.fortinet.com/t5/FortiGate/Technical-Tip-Block-file-transfer-in-Skype-while-allowing-chats/ta-p/242579We found this post regarding blocking file transfer using FortiGate firewall. The option to set up application filters and overrides was available and everything was set up as instructed in the given link, but when tested FortiGate did not block file transfer in skype. We are currently using FortiGate Firewall version 7.0.13. We are unsure how to proceed with blocking file transfer in skype using firewall, other than this. https://nhanthang.com/blocking-s

Having an issue with FortiClient VPN on my Macbook Pro M3 2023, running Sonoma 14.6.1I connect back to my office using it and it works for about 30mins, then the connection drops.Looking at the logs on the FW, there isn't anything indicating why the connection would be dropped at the server end, so I can only assume that the app on the laptop is what is having troubles.Any suggestions 

Hi all, really weird SFP/DAC behaviour here. When we connect a FortiGate 120G (v7.0.15 or v7.2.9) to a FortiSwitch 224E-PoE (v7.2.4 or v7.2.8) with a SFP or a DAC cable, the port on the FSW comes online like instantly. But the port on the fortigate stays offline. When we wait like 15 minutes, the ports on the FGT comes online.When rebooting FGT/FSW, or disconnecting/connecting the cables, they come online instantly now.Really weird. Anyone knows what could be happening here?

Hi, Would like to check if there are latest information already about the release of newer firmware version for FG-90G?Due to vulnerabilities, I am keen on knowing when the expected dates are. Thanks!

Ok, I will admit I am a little outside my knowledge base with this one. In my investigation, I am learning that what I am looking for might be this header passed from the browser called X-Forward-For. Based on what I am seeing, this shows or can show, the clients original IP, then successive IPs as they pass through proxies.  I am not sure if this is something that is handled at the browser level itself (but I do see extensions available where you can easily customize/add, etc...), but I also see past articles about this header and Fortinet products... but it appears the traffic flow is that maybe being inbound, like protecting a web server behind a FortiGate or FortiWeb device. My inquiry for my traffic outbound from my network. Is there a way to inject that header as it passes through the firewall so if an external webserver can log that info via its auditing, I can glean the private client IP of my user (assuming I have access to that external webserver's audit logs o

Hi Team, I need to block ipv6 traffic to FortiGate.I wanted to double check if below KB also means that FortiGate will not process IPV6 traffic?Disable IPv6 through the CLI - Fortinet Community If not, how do I block IPV6 traffic to FortiGate? Thank you!

Hi Team, Does restarting the WAD process have any impact on the network? Thank you!

Hi guys, Hoping to find Fortigate WAF configuration and troubleshooting help. I see the Fortigate docs provide bits and peices of this WAF technology for FortiGate firewall (mostly just scratch the surface), Youtube videos provide a little bit more info and I can sort of set it up and assign WAF policy to an active security policy but what's next? Is there a way to verify configuration, traffic flows, detection of hacks, logging, which WAF features should be enabled and for what reason, how to troubleshoot and etc. We are currently use FortiOS 7.0.12 and don't have the FortiWeb appliance. Thanks for any assistanceJimmy

I have a computer with Windows 10 Home Single, trying to connect to VPN through FortiClient SSL VPN with MFA version 7.4.0.1658.Before updating, it was connecting fine. In the updated version, the connection is not loading.There are no error messages occurring. In the event log, no errors are detected. I tested with two different users, both on the same version of Windows, and encountered the same problem.After updating to Windows 10 Pro, the updated version of FortiClient was able to connect to the VPN. Is there any compatibility issue between the updated FortiClient version and Windows 10 Home Single or Windows 10 Home Edition?

configuring ssl vpn on firewall but after finishing, i cannot connect from outside to the internal network using Forti client vpn