Skip to main content

Support Forum
- - Knowledge Base
Community Groups
Blogs

Create topic
Login

New Fortinet Community Live April 21, 2026

17 days ago

Fortinet Community
Search

Solved

7575 Discussions

Recently active

Most views Most replies

ecoprotecVisitor III

Published in Support Forum

SSL-VPN with WAN Interface containing secondary ip addresses

Hello all,we have a /28 subnet which is provided to us by our ISP. From this we can use 11 addresses.I have created this network as a physical interface with the "secondary IP Address" option.The first address as IP/Netmask in the interface and the others in the table below. But now I want to use VPN only on the first address. This blocks me now on all other addresses the port. Or am I not following best practice for the WAN connection with multiple fixed IP addresses?We are currently moving from an Sophos UTM to Fortinet and many things have been implemented differently here.

luca1994Explorer III

Published in Support Forum

FQDN resolved with ip 208.91.112.55

Hello Team, when the client tries to reach a specific url "http://fqdn:9999", in the log I see that the FQDN is resolved with the ip 208.91.112.55 (fortinet block page).If I try to ping the FQDN from the fortigate cli, the ip that is resolved is correct but from the client it is 208.91.112.55. Any suggestion? Thanks for the support

GiuseppeBVisitor III

Published in Support Forum

strange DNS behavior

Hello,   I'm noticing a strange behavior of the firewall, and therefore also from the windows machine behind, when I try to resolve the FQDN that is published on my connection. let me explain better:   1)if I try to resolve the FQDN from the firewall the resolution is not the public ip but 192.168.178.101 which is the IP of the firewall point towards the router 2)if I run an nslookup of the same FQDN from the windows machine behind the firewall the resolution is the ip of the windows machine3)if I ping from the router on the same FQDN I finally have the public IP as the resolution, which is the same as the WAN router interface as it is it that sends the updates to the dynamic DNS The dns configured on both firewall,router and windows is 8.8.8.8 and 8.8.4.4 Anyone knows why i have this behavior and how to figure it out? BR, G

albaker1New Member

Published in Support Forum

Too many admin login/logout email alerts from localhost

We recently re-implemented alerting for admin logins and logouts on a FortiGate that currently isn't deployed - the firewall is mostsly for testing a few capabilities and features before rolling them out to the other firewalls. The problem is that localhost is logging into the firewall, and in the past 8 hours, it's logged in 18 times - anywhere from a few minutes to 45 minutes. This makes the admin login alerting useless.   FortiGates are running 7.2.5 and FortiManager is running 7.2.4. Is there a way to prevent alerts from going out when being logged in from 127.0.0.1?   Thanks

BusinessUserExplorer

Published in Support Forum

Default gateway for wan dynamic ip

What and how to configure for default gateway if wan uses Dynamic ip? I cannot use a static IP address. Any help is appreciated. 

BusinessUserExplorer

Published in Support Forum

Change Firewall but use same fortidyndns name.

Is this possible?The end user is changing firewall of a different model.He wants to retain the same fortidyndns name in the new firewall - also fortigate.He does not want the user to change the vpn login because the fortidyndns changes.

MarcoRomanStaff

Published in Support Forum

FortiGate as DNS Server

Hello FortiExperts,  Is there any table or rule to know for a FortiGate appliance or virtual machine, How many DNS Zones and Domains entries can we fit in? Can FortiGate work as a datacenter DNS with hundreds of thousands of entries?  Is there a reference documentation we can check?      

pmhpNew Member

Published in Support Forum

Fortigate 60D Rugged EOL - last update

Hello, We have a fortigate 60D Rugged. https://support.fortinet.com/Information/DownloadProductPDF.ashx?pid=980&name=FortiGate-Rugged-60D Product is in version 6.0.17 and affected by vulnerabity : PSIRT Advisories | FortiGuard Will be there any security update to correct this vulnerability and vulnerabity to come until  15 jully 2026 ? Product Life Cycle MilestonesEnd of Orders (EOO) 15Jul2021Last date to purchase new maintenance contract 15Jul2021Last date to extend an existing maintenance contract 15Jul2025Product support expires 15Jul2026 Regards,Damien

noamsh88Visitor III

Published in Support Forum

How to download system events logs using bash curl?

i'm trying to download system events logs using bash curl and getting authentication errorcurl -u 'fortigate_user:fortigate_pass'  'https://<fortigate ip address>/api/v2/log/memory/event/system/raw' --compressed --insecure and getting following authentication error:<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>401 Unauthorized</title></head><body><h1>Unauthorized</h1><p>This server could not verify that youare authorized to access the documentrequested. Either you supplied the wrongcredentials (e.g., bad password), or yourbrowser doesn't understand how to supplythe credentials required.</p><p>Additionally, a 401 Unauthorizederror was encountered while trying to use an ErrorDocument to handle the request.</p></body></html> how can we passthrough the API login for curl command (-u 'fortigate_user:fortigate_pass' ) in order to download the log? no

StevenTExplorer II

Published in Support Forum

CPU and Memory usage at 50% threshold with email alert

Hi All, I had found the CPU threshold and its alert but for the memory.I had found a few but did not understand this trigger event in the automation for memory. Automation > Triggermemory conserve mode entered memory conserve mode exitedWhat is this 2 event log and what does it do? And for the below threshold percentage, once we had configured it. How do we set the email alert under the automation for IF the memory threshold hit 50% and email alert.I using this guide: https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/194558 config system global set memory-use-threshold-extreme <integer> set memory-use-threshold-green <integer> set memory-use-threshold-red <integer> end   

slouwExplorer III

Published in Support Forum

40F Physical ports, hard-switch Disambiguation, Default config

Good DayI have a Fortigate 40F and I wish to understand a few elements as shown in the screenshot.I have executed an execute factoryreset and no other changes.I can see in the output below interfaces that correspond to the physical interfaces I see on the box.These are the lan1, lan2, lan3, a and wan interfaces. These all are physical copper ports on the device.the wan interface has DHCP in by default and has gained an IP address as the port is connected to a Starlink unit.Q1 What is the "lan" interface? I see that type = hard-switch. Maybe this represents an internal L3 interface?Q2 What is the relation between the "lan" "hard-switch" and the physical ports mentioned above i.e. lan1, lan2, lan3, a? Can it be these are by default L2 ports in the same L2 domain on the hard-switch? Presumably if so the static address 192.168.1.99/24 is part of the default config? Any comments to disambiguate appreciatedThanks

JuckerExplorer III

Published in Support Forum

FortiNAC Fortigate remote vpn using LDAP Groups based authentication support question

Hello, Does FortiNAC support ldap group based authentication for fortigate without using the tag for remote access vpn?. Only Radius simple authentication. Thank you.Regards!@ebilcari FortiNAC 

Donglv9Explorer

Published in Support Forum

Fortigate-VM 7.4.0 - Set Virtual-Disk Storage Size

Hi all,I have a FortiGate-VM version 7.4.0 running on VMware and there are two disks are allocated to this vm 20560MB/sda and 81920MB/sdb as show below:The virtual disk is 80GiB, but the actual size used for log currently only "30107" as show below:Now I want to set the storage size from 30GiB to full disk allocated size is 80GiB. I have seen some article related but in my version 7.4.0 those command is unavailable. Please show me some guide or command line to set the storage size.Thanks!*Related article: Technical Note: How to extend the disk space for l... - Fortinet CommunityFortigate - Show Current disk usage static. - Fortinet Community -> staff gave me this but the links not available 

HASimacNew Member

Published in Support Forum

Fortigate running 5.4.4 drop packet with SYN+ECN+CWR flags enabled

Hello, One of our customers migrate from 5.2.10 to 5.4.4.After this migration, packets with SYN+ECN+CWR flags set were silently drops by the Firewall.In order to solve this issue, we had to disable ECN congestion on the client.https://ask.wireshark.org/questions/32067/many-many-tcp-out-of-order-dup-acks-and-retransmissionsNetsh interface tcp set global ecncapability=disabled Is it a known issue with Fortigate FW ??Any command to disable this check ?? Regards, HA   

NotMineExplorer III

Published in Support Forum

MGMT interface for HA Hartbeat

Hello, Is it advisable to use MGMT port as one of the heartbeat interfaces for HA (on FGT-200F, for example)? I remember reading somewhere Fortinet recommending NOT to use MGMT interface for general traffic, but what about HA?Cheers,Slavko

HB12Explorer

Published in FortiSOAR community

SMTP Connector is not visible in either the Manage tab or the Discover tab in Content Hub

Hello Guys,We are experiencing an issue with the SMTP connector.When we deployed FortiSOAR, we encountered an error stating "failed to install python libraries". This situation occurs because we did not provide an internet connection to the machine. We have also attached an image for same. To install the required Python libraries, we executed the following command: "sudo -u nginx /opt/cyops-workflow/.env/bin/pip install ansible --extra-index-url https://repo.fortisoar.fortinet.com/prod/connectors/deps/simple." After running this command, we received the following message:  After completing the deployment, we searched for the SMTP connector in the Content Hub but were unable to locate it in either the Manage tab or the Discover tab. Please advise on how to resolve this issue?

CVB1Explorer

Published in Support Forum

Trouble with firewall policys

Good morning, I have a forti 60F and for a few days I have been experiencing problems with the firewall policies, they worked well and now I have to create groups without any security profile so that they can access the internet, the problems are permanent, could you help me try to discover what's going on? Firmware: v7.0.12 build0523 (Mature) Another thing I noticed is that even though dhcp assigned me an IP to a machine, on devices it still shows me the old IP. An the CLi Console shows me connection lost. Thank you so much

Christian_89Contributor III

Published in Support Forum

Fortigate 80F Shaerd int

Hello TogetherOn the Fortigate 80F I have 2 SFP interface which are shared interface. Can I use them as a single interface?On the Fortigate runs 7.4.1

mmrezaExplorer

Published in Support Forum

Hello, I have a problem with ssl-vpn, it is very slow, I don't know whyCan anyone guide me?

albaker1New Member

Published in Support Forum

Automated FortiGate backups with time stamps, encryption, and notifications

We're using the script below to backup our FortiGates, but it creates only one backup file name. We'd like to keep the last 5 backups, which we can manage with a cron job. How do we append the time date/timestamp to the script? We'd like to ensure the backup files are encrypted, so is there a way to encrypt the files? We'd also like to be notified if the backups were successful or not, so is there a way to incorporate this? Thank you. Step 1:config system automation-triggeredit "Backup"set trigger-type scheduledset trigger-frequency daily <----- Frequency of the action.set trigger-hour 23 <----- Hour of the triggered action.set trigger-minute 58 <----- Minute of the triggered action.nextendStep 2:config system automation-actionedit "Backup"set action-type cli-scriptset minimum-interval 0 <----- Limit execution to no more than once in this interval (in seconds).! set delay 0 <-----Delay before execution (in seconds).! set required enableset script "execute backu

leonardomotheVisitor III

Published in Support Forum

zabbix and fortiguard

Hi,  I need to monitor fortiguard licenses through zabbix, is there any way?

noamsh88Visitor III

Published in Support Forum

How to config FortiGate to save 90 days logs history? (Forward Traffic and System Events)

Can someone advise how to config FortiGate to save 90 days logs history or to config limit for log size (up to 1GB log size)?the FortiGate logs history we need are Forward Traffic and System Events 

aalvarezjNew Member

Published in Support Forum

SAML with SSL VPN Issues

Hello,I have a #Fortigate 100F with v7.0.12 and I have a issue with VPNSSL + Azure SAMLI configured it in others Fortigate with no problem, but in the last i can't connect with Forticlient, it stops in 40% when i try to connect.I have enabled debug and i see this error:__samld_sp_login_resp [842]: Failed to process response message. ret=-111(Failed to verify signature.)samld_send_common_reply [114]: Code: 1, id: 576, data_len: 56samld_send_common_reply [122]: Attr: 21, 8,samld_send_common_reply [122]: Attr: 22, 32, Failed to verify signature. Can someone helps me to find the problem? Thanks, regards 

Mes-Lili2Explorer III

Published in Support Forum

Add AD users to firewall policy

Is this possible... the only information I can find states "user groups".I have this part working by using FSSO for users and groups but cannot find a way of adding a policy for 1 user unless i create a new AD group on my domain and add that group to the policy.  

Donglv9Explorer

Published in Support Forum

Fortigate - Show Current disk usage static.

I want to check the current sttatic of disk-usage in fortigate VM. My Fortigate Vm running on VMWare have 2 disks: Disk SYSTEM (20.0GiB) and Disk Virtual-Disk(80.0GiB)I tried the deviceinfo command above, but the static is confuse. How can I check the total disk-usage?

1
...
136
137
138
139
140
141
142
...
303

Page 139 / 303

Badge winners

lourdes.ruizhas earned the badge Discussion Starter
Dreamwall52has earned the badge First Reply
chowr_ftnthas earned the badge Discussion Starter (5)
ravisinghhas earned the badge First Reply
Aatif farooquihas earned the badge First Reply

Powered by Gainsight

Terms & ConditionsAccessibility statement

Sign up

Already have an account? Login

Login with SSO

Login with Saml2

Login to the community

Login with SSO

Login with Saml2

Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.

Enter your e-mail address

Back to overview

Scanning file for viruses.

Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.

OK

This file cannot be downloaded

Sorry, our virus scanner detected that this file isn't safe to download.

OK

PRODUCTS

Enterprise
Secure Networking
User and Device Security
Security Operations
Application Security
FortiGuard Labs Threat Intelligence
Small Mid-Sized Businesses
Overview
Service Providers
MSSP
Mobile Providers

PARTNERS

Overview
Alliances Ecosystem
Find a Partner
Become a Partner
Partner Login

TRUST CENTER

Trusted Company
Trusted Process
Trusted Partners
Product Certifications

MORE

About Us
Training
Resources
Ransomware Hub
Support
Downloads
CyberGlossary
Careers
Early Talent Program
Investor Relations
Social Responsibility
Sitemap

CONNECT WITH US

Blogs
Fortinet Community
Email Preference Center
Contact Us

Copyright © 2026 Fortinet, Inc. All Rights Reserved.

Terms of Service Privacy Policy Notice for California Residents Do Not Sell Or Share My Personal Information GDPR Canadian Accessibility Cookie Settings