Solved

Hello,I have use my phone SONY 1 V , Android 14,and newest Forticlient VPN app,then I need to connect VPN but app show error:revoked by android reboot,what can I do to deal with this problum?

Dear support We have Forti SIEM version 7.1 and we are prepared threat intelligence for MISP project and we need to connect the FortiSIEM with MISP to pull the IoC's i you can help us to provide us the steps with details 

I purchased a used FortiSwitch 108D-POE but have been unable to perform a factory reset on it. There is an unlabeled reset button on the left side of the front. Pressing and holding it for 60 seconds or longer has no effect. I have also tried unplugging it and holding the reset button down while it boots. I have tried pressing and holding the reset button for 10 seconds right after a reboot, and also tried the same after waiting five minutes. In its current state, when I connect it via port 10 to my laptop (set to 192.168.1.2), I get a link activity light but I cannot ping 192.168.1.99 nor access it by HTTPS or SSH. Looking to factory reset it so I can gain access to it. Thanks for any tips or suggestions!     

Hi All, In FortiSwitch OS, you can nicely search in the Forwarding Table under Switch: Monitor... but it seems like it 'only' support wildcard searches.Is there anyway to specify 'exact' searches or 'vlan=NNN' searches? If not, in my world, it calls for a feature request.   I often need to see what is on port1, not 'port1-19', or what MAC's is on a specific vlan, and putting '10' for vlan 10 into the search field gives me vlan 10, MAC's including '10' and port10... ;) 

Hi FortiSOAR team, I try to connect fortisoar to cisco ise server.I've created an api user in cisco ise. By using this user, I make api call from both python script and postman. But when I try this credential in connector, I get 401 error.What is the missing or wrong?FortiSOAR  

Hello everyone! Please help me if anyone has experience or worked with implementing Fortinet ZTNA. I want to implement ZTNA in my network. but I don't know which subscription is necessary for that. Do I need valid subscription on my FortiGate? which subscription should I purchase for Endpoints or Forti Client EMS?  Any of Fortinet Support Can help me? I need a Comprehensive guide, please. Thanks. 

Hi I want to exempt one of my local web server facing internet from SQL Injection (Extended) signature , because it causes so many errors when users want to submit forms. How can I do that?

Hi Everyone , I am facing a strange issue with sync rules. I have created sync rule to import the remote LDAP users. Sync is not happening correctly  because it does not reflect the correct users of the remote LDAP group.I move the user to another OU  which is not part of the filter and the user is not removed from the group. I have also deleted the user for test purposes and user still remains in the remote users. 

Hello there! related link:wpa3-enhancements-to-support-h2e-only-and-sae-pk-7-2-1  I have recently purchased Fortigate 40F together with FortiAP 231F, to set up a WLAN environment in my laboratory to test iot equipments. What I am interested in is "SAE public key" as introduced as part of WPA3 R3 spec, and it is introduced as a new feature since FortiOS 7.2.0. My question is:Has anyone ever tried to associate a SAE-PK-capable STA with a FortiAP(7.2.1 or newer) that support SAE-PK? If so, is there any tutorial simple enough to guide us through the first integration with regard to this SAE-PK authentication. For example, how to configure wpa_supplicant and what is the wireless sniffer capture like? P.S:Whenever I unclick the local standalone option, the SSID turns OFF automatically.Somehow there is a rule between the "SAE-PK authentication" and "local standalone" parameter?However, it can be found nowhere in any document. Thank you very much, experts.

Hi   I have 2 wan links in a sdwan zone. I also created a sla check to 8.8.8.8 and selected the manual mode on policy. So if one wan link fails the defined sla, is that going to failover to other wan link automatically?

Hello, How fortigate DNS setting should be configured when there is a central AD DNS server in network, all pc computers get DNS from AD DNS server, so I configured Fortigate DSN to point to AD DNS server, and on domain DNS server I configured forwarder to 8.8.8.8 - it this good? I thought to configure in different way, I mean, point AD DNS forwarder to Fortigate IP, and on Fortigate DNS set any public DNS servers, but I couldn't configure it, I had not internet. I don't know how to configure ipv4 policy from AD DNS server to Fortigate itself, and without that as I said my all computers did not have internet access. Please advice me, thanks.

Hello, I was wondering if someone could shed some light on how the following can be achieved, if it can.When 2FA is configured for users that are connecting to SSLVPN, that are either via RADIUS/FortiAuth/FortiToken or using a 3rd party OTP app, I noticed that you can change the banner message that is being displayed in FortiClient, specifically instead of the standard from below to a custom one: Enter token code or no code to send a notification to your FortiToken Mobile  Can anyone point in the right direction on how to achieve this ? I searched in the Replacement Messages in FortiAuth and FortiGate, but couldnt find it.Thank you.

I've had 2FA working again Authenticator for some time but recently was tasked with turning on the push notifications but my FortiClient does not have a "Push" button and I really never knew it was supposed to. I thought when you made the authentication request (logged in when prompted by the VPN config) that it would go ahead and ask you to input the token AND still accept the push, but from the 6.4.8 Release Notes it would appear that I should have the option to select "push" OR to enter my code:   To connect VPN with FortiToken Mobile using push notifications:1. On the Remote Access tab, select the VPN connection from the dropdown list.2. Enter your username and password and click the Connect button. The Click on 'FTM Push' or enter token code box displays.3. Click FTM Push. Your device with FortiToken Mobile installed receives a notification.4. On your device with FortiToken Mobile installed, tap the notification and follow the instructions to allow the authentication request

Hello,I'm trying to get FSSO working through Fortimanager. In FortiManager I have set up the FSSO external connector, I have also set up Device Mapping, in policies I can assign users to a rule, however the connector itself does not appear in FortiGate. I have Fortimanager installed on my server, firewalls at customers, so I would need the connector to be migrated to the firewall as well. According to this link, the connector set in FortiManager should be transferred to FortiGate, unfortunately in practice this is not happening.https://community.fortinet.com/t5/FortiManager/Technical-Tip-Configuring-FSSO-from-FortiManager/ta-p/268745If I understood the message at the end of this article, it says that the connector should be transferred to the firewall, right?https://docs.fortinet.com/document/fortimanager/7.4.2/administration-guide/303084/creating-fsso-connectorsCould someone please advise me?

Hello colleagues,I use FortiToken to log in to computers and servers, and in this case, when trying both by push and by code, the first time works correctly, but for example, if I try to log in to another device during the same period when the token has not changed, I cannot log in, only when the token changes.According to the FAC log, the following appears: User does not verify the login on FortiToken Mobile: Received invalid token code from user. Authentication aborted.Given that the code is correct, is there any way to change this configuration?Thank you all in advance. FortiToken 

The problem is in the work of the authentication agent. There is Exchange 2019 in the DAG cluster. After installing the agent and working for some time, there are problems with user authorization with the error reason=2, while all users cannot log in through the web.At the same time, user authentication is successful on the server itself. FortiAuntificator: 6.4.1ForiISSOWAAgent: 2.3 Agent Microsoft OWA errors: [(null)|22|DEBUG] Login: Session luqtww2dgd32l4t5j0unvd2f: Verification of user (ismagilova_olga) OTP successful: VerifyOTP for user first-name_last-name was successful: 200 OK [(null)|22|DEBUG] Login: Session luqtww2dgd32l4t5j0unvd2f: Submitting user credentials to: https://exchnage/owa/auth.owa2023-07-04 10:49:30,400 [(null)|22|INFO ] Login: Session luqtww2dgd32l4t5j0unvd2f: Server (ip address) rejected logon with reason: reason=2

Hello Guys. I'm facing issue with the Hub and Spoke topology showed in the picture, I added Spoke1 to newly to the topology and I can ping from any device behind the spokes subnets to the subnet behind the spoke1 but not the reverse!I can ping from (172.16.11.2) behind Spoke1 to (10.11.22.14) behind the Hub.But, I can not ping from (172.16.11.2) behind Spoke1 to (172.16.6.28) behind Spoke3 (the reverse ping working!).the funniest thing is that another IP from the same subnet is pingable! when I try to ping (172.16.6.233) it just works fine. Any idea?  

The Fortinet chosen naming convention for objects created in the global ADOM uses a single letter 'g' prefix. Fortinet documentation says that you should not create objects in ADOMs that begin with letter 'g' or else conflicts can occur with the global ADOM objects. This would preclude the use of address objects named 'google', 'gmail', 'greatscot', and on and on. So it would seem that the choice of using a prefix 'g' is very limiting. Why did Fortinet choose this naming method?Are there any ways to relax this rule to allow other prefix characters or strings?Would it be better to provide an option to use a different prefix, such as an underscore, or even a user configurable character?Would it be even better if a user configurable string could be used? Such as, 'global_', '_glbl_', 'g_', or some other user chosen string?

Hello,I am trying to join Fortiauthenticator as a machine in windows AD.I am following this document :https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-Joining-FortiAuthenticator-in-the-active-directory/ta-p/195891 I do not want to use adminsitrator account for this operation for security reasons. Is there any other way how to do it?

Hello,I am facing an issue with the disk size of Fortiauthenticator VM. I have increased disk size to 250GB on the VM machine but it shows only 60GB on the Fortiauthenticator. Is it possible to increase it? 

Hi, I would like to understand the FortiSIEM rule "No logs from a device" which I think is when a device stops sending logs for 10 minutes, I have many alerts and I want to increase the time from 10 minutes to 1 hour, How i can do it?

I have spare equipment that is not licensed, but I need to exchange it for one that is in production and licensed.  I saw that the rehost is normally done through RMA, but my production equipment is not having a problem, this exchange needs to be carried out due to the client's particular needs.  Is there possible to perform this rehost via the customer's Admin Portal? Or through some Portal that the customer has control over and is not dependent on having to open a case with Fortinet Support? Thanks. Best Regards.

HiWe want to allow allow anydesk for it department but in ssl logs i see that anydesk ssl is resign and untrusted. I exempted anydesk domain in deep ssl inspection but did not solve the problem. What can i do to solve this problem?

Hello guys, I'm a newbie in IT field.I'm currently trying to setup policy on a FortiGate100E to block the use of Line PC client.>>FortiOS v7.2.4 build1396(Feature)Now I successfully block Line usage, but regarding the subject, I want to know if it's possiable to block file transmission on Line PC client without affecting text and voice messages.I've tried to dissecting packets and setting app signatures, but can't made any progress. Thanks for any reply and possible assistance.

Hi What is the best practise to create a policy from wan to lan?