Solved

 Greetings,I should configure a WiFi SSID on a UniFi Controller that performs redirects to a Captive Portal on a FortiGate so that the users are picked up by a FortiAuthenticator. In particular:Users connect to an SSID issued by the Unifi Controller.As soon as the user connects, a FortiGate Captive Portal should appear and read the users from the FortiAuthenticator.After user login, he can go Online.It can be done?If that's not possible, I was thinking about:SSID without passwordCaptive Portal on the FortiGate interface (which would also be the gw of the users connected via WiFi)Authentication on the FortiGate Captive Portal with users drawn from the FortiAuthenticator.Thank you very much for helping.

Hello, I fail in connecting a FG-200F v7.2.4 to FortiClient EMS cloud. In "Fabric Connectors" -> "Connection status" it reads: FortiGate not authorized, but in FortiClient EMS cloud neither the Authorization pop-up is displayed nor occurs the device in EMS cloud Administration -> Fabric Devices.Does some know how to debug this?I am also searching for a how-to on registering a Fortigate by using a EMS cloud-generated Fortigate key by GUI or CLI. best regardsMartin Haneke

HiWe have some remote users with windows 7 and forticlient vpn app does not install on windows 7. I created a native l2tp vpn tunnel, it created 2 firewall policies automatically. I also want to have split tunneling enabled. When they connect via this tunnel, they can not connect to our internal network nor internet. What should i do to have access to internal networks and internet at the same time? Thanks.

good morning friends.Could you help me with this query.I have a virtual fortianalyzer and I notice that the ADOM License option indicates "unlicensed".Could you tell me what that option is for?On my Faz I have a synchronized FG. 

Hello teams,I have new installation of FortiSIEM Supervisor All in One, and my request is it's possible to configure NFS storage for event database and how to do this?best regards

Hello everyone, I'm somewhat new to FortiGate setup. I work in IT Security, and I'm currently creating a new policy on my FortiGate. This policy aims to limit social media usage within my company. I would like to know if it's possible to make an exception for guest devices when they connect to our network. In this case, I've configured a different segment IP from our office segment IP ?Note : This is my current setting

Hello Peoples,I am not a computer person, so type slowly so I can understand.In other words - please treat me with respect as I may not understand terminology.I have been through all my available IT resources and they have washed their hands with my problem which leaves me stuck.Last week, for no apparent reason (perhaps windows update?), my VPN connection to my university for my course stopped working. Being an external student in a remote area this is a problem.  On my PC workstation, over the course of the last week, I have now completely reimaged my machine with a clean win10 64 install.  I have updated all drivers - everything from motherboard chipset, PCI and network drivers.  I am running windows defender in standard config but no other security such as nortons.The symptoms are:1. Send connection request2. Receive MFA challenge3. Forticlient says connecting after MFA challenge4. Says connected, with bits received and correct IP address to host shown.5. No bits rec

Hello,  I have a problem with Forticlient VPN connection. When i try connect to server i got massage "Network error. Can not connect to VPN server". I'm using domain name in Remote Gateway. If I use the IP address everything is ok. Mac OS 13.3.1 (but it already happened to me in previous versions)FortiClient VPN for Mac 7.0.7.0245 (but it already happened to me in previous versions)FortiGate 60F 7.0.11 (but it already happened to me in previous versions) Ping by domain name works ok, access by web browser by domain name works ok. A Windows computer on the same network as the Mac connects perfectly by domain name.  Anyone know how to fix it? Thank you,

Hi I'm trying to allow multiple IPSec dial-up connections from the same source IP, and I found help here: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Allowing-multiple-IPSec-dial-up-connection-from/ta-p/198550My problem is, that I get an error, when I try to set the "route-overlap allow" command. It just says "unknown action 0" I have a Fortigate 60F with firmware v7.4.3 Regards Thomas Barnes

In this topic I will show how it is possible to communicate between fortigate and mikrotik using IPSec. For this occasion, only Mikrotik has a public IP. Step1;VPN>IPSec Wizard> choose the custom tunnel. Give him a name select your network interface, put the IP address of your mikrotik in the IP ADDRESSES field Following this configuration Generate a strong password  Because I'm using a fortgate trial license, I don't have many options for encryption and authentication, so I adapted mikrotik to the reality of my fortigate on this occasion.But it is recommended that you always use more complex algorithms.  phase1,   for phase 2, I increased the strength of the authentication algorithm a little. It is extremely important that you keep in mind the networks of Site A and Site B that you want to communicate, in this case my local network (Fortigate) that I will share with my mikrotik is 192.168.72.0/24, and the network f

Hi Guys,  Good day, Please help to solve my problem on my 60D Forigate Firewall device.I currently avail a 1 Static IP addresss from my ISP Provider, they provide Static IP, Subnet Mask and Gateway.But I cant access the internet using my PC that connected on the Fortigate.May Setup on my home lab is (  ISP Router >> Fortigate 60D >> MY PC )I tried also execute ping on the Fortigate CMD but its always says unable to resolve the hostname.When I tried to change the IP on my WAN1 port from Static to DHCP, the internet access was working but when I tried the setup the static the problem will exist. Thank you!

I am trying to upload a Fortimail image to VMWorstation ( to practice), I have configured the IP and ports but when I open the browser, it does not load the Fortimail IP. Can you help me, please? I always have these problems, I don't know if I have to configure in the vmware workstation (settings) or in the fortimail (cli). I share the commands that I entered in the CLI#conf sys interface(interface)#edit port1(port1)# unset ip(port1)#set mode static(port1)#set ip 192.168.17.15/24(port1)#set allowaccess http https ssh ping(port1)#endWhen I do an execute ping 8.8.8.8, I get this message.#execute ping 8.8.8.8PING 8.8.8.8 (8.8.8.8): 56 data bytessendto: network is unreachablesendto: network is unreachablesendto: network is unreachablesendto: network is unreachabletimeout . . .timeout . . .timeout . . .  

Hello! About FortiEDR,1) What are the dependencies before installation?2) Any compatibility issues for devices where FortiEDR will be installed?3) Any guide/ step by step setup for FortiEDR?4) Any integration with other Fortinet devices/ service for FortiEDR to work?5) Where can I download a image file of FortiEDR for Hyper-V/VMware for a demo environment?

Hello everyone,I need some help, i have a Fortiswitch 148F-FPOE, Fortivoice 300e-t, Fortifones 480B and Fortigate 60e. Fortiswitch working as standalone. I have two vlans, one for data (VLAN10) and one for voice(VLAN20). I want to connect PCs to fortifones and PCs can lease an ip from data vlan and fortifones can lease an ip address from voice vlan automatically. How can i configure the switch ports to achieve that? Thank you

I am migrating a Forticlient EMS on a new server (2019)On the install, it seems that the IIS was running, so The EMS couldn't use it.It's now using only 443 with https.I have disables iis, but how can i turn on the 80 port in my current install of EMS to use letsencrypt ? Thank you.

On my lab,I licensed the EMS server with a trial license through my forticloud account, see image below:             I noticed that there are only 3 licenses to test the clients.From direct experience does anyone know if it is possible to get trials for the ztna component from Fortinet ?Best Reagrds

Hi Everyone,I'm running Fortigate VM 7.0.14 for ESXi with 15dd trial license, the webui is lacking the "Security Profiles" item: is this due to the trial license or should I enable it from anywhere?Thanks

Issue has been detected in the FortiSOAR RDK (Rapid Development Kit) pertaining to the Onchange event and the associated input fields' display behavior. Particularly, when triggering the Onchange event for certain parameters, such as 'Without a User - Application Permission', the expected behavior of enabling the server URL textbox is not observed.    Onchange issue

I'm deploying FortiClient 7.2.3 using Jamf to macOS 14 devices. The issue we are having is that even though we have a mobileconfig profile deploying the necessary certificates and PPPC settings to the devices, when the FortiClient connects to our EMS server for the first time, it prompts for admin credentials for a certificate change. But regardless if you enter the password or cancel the prompt no change is made to the certificates in keychain. After the initial connection to EMS this prompt does not re-appear. Has anyone been able to get rid of this prompt? This wasn't an issue when we were using version 6.4.8 of FortiClient. 

FGT40F

I just ran into this: We have a Windows DHCP that has a scope for a vlan.the vlan interface on the FGT100E is set to do dhcp relaying to this Windows DHCP.the Windows DHCP also has dhcp option 138 set for all scopes it has.If I now connect a client to this vlan interface and set it to request an ip via dhcp it does get an ip from the Windows DHCP. Also the correct scope is used. Networking works fine so far.However the DHCP ACK is missing the option 138 completely. If I do packet sniffing on the FGTs interface where the DHCP Server is connected to I do see the forwared request from my client and I do see the answers including the ACK. This ACK does contain option 138 but the value in the option is not what is configured on the DHCP Server. And as said the client doesn't receive option 138 at all. Did anyone exprience this or similar and has some hint for me why that happens?

Hello All, i try to use proxy ONLY for the Fortinet Client on Windows.I used this XML config (from docu).<proxy><update>0</update><fail_over_to_fdn>0</fail_over_to_fdn><online_scep>1</online_scep><virus_submission>0</virus_submission><type>http</type><address>myproxy</address><port>3299</port><username></username><password></password></proxy>BUT still the Fortinet Client connecting without Proxy.I also installed the newest Free client 7.2.4.0972_x64 Using the proxy in Windows network settings is working, means VPN via proxy is working. Any Idea why FortinNet client ignores the proxy from the configuration?Thx and rg A.  

What is the Authentication Servers for in the FortiClient EMS Cloud setup and how does it differ from the SAML Configuration thats under User Management?

Hey,  We are a small startup looking into buying a network firewall that would be easy to connect to the Fortinet VPN.  I searched for articles describing how to do that with Juniper or Cisco, and that doesn't look straightforward. Therefore, I'm seeking advice on a modern, rack-mounted device suitable for managing a very modest amount of tracking that can be easy to set up as a Fortinet client.  Best,Yevheni 

Hello, I would like to have confirmation if possible (I'm a novice in the field). I have this message "Log-forward 'ld-xxxxxxx' lag behind 99.92%, discarded 9551454767149537bytes, every 10min and I think the FAZ can't forward all logs to ELK. Can anyone confirme my thinking  Even in the graph < Receive Rate vs Forwarding Rate > I can see that number of receiving log is heigher than the forwarding one. Thank you for your help.