Solved

Hello all,  FortiOS 7.2.4EMS Server 7.0.7Forticlient Enterprise on Android 7.0.7.0068 I have configured an IPSEC dial up connection in EMS server. This works perfectly but not "auto connect, Save password and Always UP.  After the IPSEC config was rolled out over EMS it works once, after disconnect alle 3 options are gone away and i must reenter my password on every connection. The strange thing... i see that user and "password" are saved in the forticlient.  The next strange thing... the options:https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-activate-Save-Password-Auto-Connect-and/ta-p/197543 are not availabel anymore to configure... so were they are??? Only on EMS they are available, and yes i checked all boxes :)

 I have a 201F that I am using to replace an old SonicWall. I have a LAN and a DMZ setup. The only server in the DMZ is an SMTP server that I relay application mail off of. The SMTP server has a software firewall that controls access to only the IP's I want relaying mail. The software firewall reads the incoming source IP to check if the incoming request is allowed to send. When connected to the current SonicWall, all the traffic comes in to the SMTP server with it's source IP. So if a request is from a server at 1.2.3.4 for example, the SMTP server sees IP 1.2.3.4. When connected to the 201F, all the traffic is coming in not with the source IP, but with the IP of the port from the 201F that the SMTP server is connected to. So all traffic - good and bad - has the same IP. Obviously my SMTP software firewall can't filter what's good and bad when all the IP's are the same.How can I retain the original IP for the traffic like my SonicWall does? 

Since March 2nd, we have detected the following alerts on several fortigates. Moxa.SDS-3008.CVE-2022-40224.DoShttp://www.fortinet.com/ids/VID52664 However, the alerts are only for 5.2.x and not for other versions.Also, in the alert, it is trying to dos attack from LAN to WAN, and the destination of the attack is trendmicro and eset.Trying to attack a company that has DOS countermeasures is also unnatural.Is it a bug that occurs only in 5.2.x?

Followed the Special Notice Docs but still keep getting prompted that "FortiClientAgent" wants to update the certificate trust. Along with this the entire Forticlient - nothing is clickable - like it's all greyed out. Seems like i can force a scan through EMS... Anyone?

Hi guys, Just want to know how many links we can configure in sdwan..

Hi, newbie here. Bought a 2nd hand 60D for studying. Set all my interface to interface mode. My port 6 is assigned to VLAN 60 with an IP range of 172.16.60.1/29. Whenever I plugin my laptop, I'm not able to get any IP on the said port. Firmware on v6.0.16 build0505 (GA). Can someone help? Thank you in advance.

How can you change the SSL certificate presented by the SSO SP on port 7831? Changing it under the following places does not seem to work. -User & Auth > SSO-User & Auth > Auth Settings >  I'm using this though an explicit proxy and it just continues to present the factory SSL cert with the FG serial number. 

I want to allow only specific users to access the internal server through RDP access and block others using RDP port (3389) as we are getting alerts of attempts of attacks on RDP port 3389. I am getting alerts of attempts of attacks on RDP port 3389.How can I achieve this.

Hello Team, I have 2 ISP aconnectivity in my infra both connectivity using DHCP . I don't have access to the client machine but I wanted to confirm that weather both ISP public ip what they are getting as we checked in what is my ip or the ip we recieved We recieved WAN ip as I have DHCP connectivity I wanted to have Nattedpublic ip Please help me how do i look into it through fortigate any command pl

I have two SKU's related to the Premium RMA Service for the FortiGate 200F that I was provided to place in my proposal.  They are FC-10-F200F-210-02-12 (Next Day DeliveryFC-10-F200F-211-02-12 (4-Hour Delivery) Can someone confirm they are basically the same Premium service except one is RMA on NBD and the second one is on 4-hour delivery schedule? Appreciate it.  Thank you.

Hello all,  i need an applicationsignature for the brave-browser. Has anyone perhaps already written one and would like to share it? Thanks a lot :)

Hello, I have 2 sites with fortigates connected by IPsec, both can reach each other.I wanted to know if there is a possibility to be connected with Forticlient at the site A, and be able to reach site B ?I tried to do a Firewall policy from the Site A tunnel IPSec FortiClient to the Tunnel towards the site B, but it's not working, maybe it's not possible and I'm totally wrong. Many thanks for your help ! 

Hello Everyone, On fortigate 60f, inside ssl vpn portal setttings " allow client to save password " check box is greyed out.Can't seem to find the reason why that's the case.Please advise.  Kind regards,  

HelloHow can I change the format of the "Source" value in "Log view" -> "FortiGate" -> "Traffic" from e.g. "0d42e9ab-05es-4202-bg6a-7r937cstff36" to an IP address? Some of the endings are represented by an IP address, and some by such an identifier as above. What it comes from?  

GreetingsI am new to Fortigate and have a lab to connect two sites using IPsec VPN. I have used Sonicwall before and am trying to learn what this type of setup would look like in Fortigate.So far, I have been able to configure it using the guides and the cookbook with no problems. But with Sonicwall, I could do the VPN tunnel using the Firewall identifier (user-defined name) instead of the wan IP. I saw that FortiGate uses the peer id, but I have to specify the remote wan IP.This feature in Sonicwall solved the problem of knowing the IP of the remote site since I transported my clients from their remote site to their main site. Still, the internet service belongs to the client, and I often do not have access to know their wan IP to be able to establish the VPN tunnel.And I'd like to see if there is something similar in Fortigate to perform that type of configuration.

How to display unauthenticated users in the "Forward Traffic" Logs? Set the Active Directory Connector in "External Connector" and it is working perfectly. but none of the users are shown except one with pink color (un-authenticated user) how can I get the remaining users and why this user only is showing? FortiGate 

Hi All, We are utilizing Fortinet products in our environment for a few years now, so to better help my journey as an effective administrator, i tried setting up a home lab using VMware. Very simple setup: one virtual machine (10.100.73.201)---> (10.100.73.1) Fortigate VM (192.168.0.65) ---> (192.168.0.1) Internet (ISP modem) one policy for testing purposes: any/any/all. Oddly, when i first deploy the VM, everything works (tested this 3 times). I can ping, browse, windows updates (everything). The following day, I can no longer browse even though there were no config changes. From the my virtual machine, i can ping the fortigate, from the fortigate i can ping the internet (8.8.8.8) and fortiguard servers are connected. DHCP on the fortigate interface, issues an address to the virtual machine and acts as the DNS server and DNS queries from the VM work against the FG interface. Below i've done a simple debug to 8.8.8.8 to catch pings, with show function ena

Hello, I have small problem with authorization in LDAP. In basic SSLVPN everything works fine, LDAP, FortiToken etc. But I need create spectial setting for one user (static IP address). I made second portal (mm-portal / full access) and second relam (/mm). User is added to separate group and to portal. I'm able to open dedicated portal, but unable to login On FortiVPN I see only:04.03.2023 17:20:22 error sslvpn date=2023-03-04 time=17:20:21 logver=1 id=96603 type=securityevent subtype=sslvpn eventtype=error level=error uid=4904307826234D2C9EC3C19FB49E5A92 devid=Fxxxxxxxxxxxxxx0 hostname=3xxxxxxxB pcdomain=mm.loc deviceip=192.168.195.1 devicemac=00-50-56-c0-00-08 site=N/A fctver=7.0.7.0345 fgtserial=Fxxxxxxxxxxxxxxxx0 emsserial=N/A os="Microsoft Windows 11 Professional Edition, 64-bit (build 22621)" user=mm@MM msg="SSLVPN tunnel connection failed" vpnstate= vpntunnel="MML VPN" vpnuser=mmlogin remotegw=ssl.mm.com.pl On firewall also very few log Actionssl-login-failRe

Hi forumI have a lot of new fortigates, direct from the box, that i need to upgrade(to version 7.0.9) and factory-reset after successful upgrade. In trying to make a configuration file (fgt_system.conf) that reset the gate back to factory-default after successful upgrade of the new firmware image (image.out). As of now im stuck in a "catch-22" problem :The gate upgrades to the new firmware version, reboots, and then tries to load the config from the USB-drive If the fgt_system.conf file on the USB contains e.g.      execute factoryreset    y the gate get stuck in a endless reset loop.All my attempts with auto-install scripts have so far also ended up in loops. Anyone done this before or have any suggestions?   

A Windows user was disabled at a client site and I was asked to verify whether he was still present and operational in the Firewall (and the SSL VPN users) and, if he was, I should disable/remove him. First of all I found no means of getting the current known LDAP users in the FortiGate database. I could get the names of all the LDAP users if I tried to add a new remote user, but I am not sure that is a list from the Firewall database or an active one via the LDAP connectivity. Then I tried to disable the user via a password change in the Windows AD. When I went to the LDAP Server to check the change via Test User Credentials, I would get a positive check whether I input the old or the new password. Of course, in time, things settled and there was no positive check with the old password. Still I need a way to1) display actual current LDAP user names known to the Firewall2) force a refresh of the LDAP user names and their credentials Any help will be greatly apprecia

The VPN client is newly downloaded from "https://links.fortinet.com/forticlient/win/vpnagent". The VPN client settings are the same as on Windows 10. The VPN is established, but the client is not receiving any data.FortiClient VPN 7.0.7.0345  

Hi Im trying to get ospf over ipsec. I have already established a vpn tunnel between the 2 site using dialup vpn. When i configure the ip in the tunnel interfaces i cant ping the other side.  I follow the guide for dialup vpn and ospf over ipsec. What videos and i see that once the vpn is established, you configure the ip on the tunnel interfaces and they ping. But i cant get a ping between the two tunnel interfaces. I appreciate any help you can provide Thanks 

Hi, I have a problem on my FortiGate61F, I have a process called "wad_usrinfohist" and it's using 40% of memory on its own. So my fortinet goes to 80% memory usage and goes into conservation mode. When I restart the fortinet, the process goes down again and my fortinet goes back to 40% of total memory usage, but the process goes back up again and brings my fortinet back to 80% after a few days. Do you have any solution to restrict the % of this process? Thanks.

I have FortiGate 60F V7.0 and 8 FortiAP231F  How to enable the WiFi controller feature in FortiGate 60F ? Do we need an extra license or not ?  Thanks.

Hi I would like to test some feature of SDW in eve-ng. so that I want to install NetEm. What is NetEM? I am not very sure. WIthout NetEm, can we use a switch to substitue NetEm for initial SD-WAN configuration on Fortigate SD-WAN network topology? NetEm function is to adjust some traffic feature on wan link such as delay etc? this is correct? Thanks