Solved

Title - self explanatory.  

I am wanting to change the hostname of our fortigates so they are more self explanitory. However we have a NPS server running and the NAS identifier is set to the present hostname of the fortigate.Is it possible to change the fortigate hostname and then also the NAS identifier on the NPS server? Will this impact anything else? Such as certs of other EAP settings? We are using EAP TLS with cert. for authentication.Also how would you do this for two fortigates with two different hostnames? Can you add a second NAS identifier in NPS under EAP TLS properties and Connection request policies?Thank you 

Greetings Hi guys, can I get some help with this issue please, these services are DOWN, running FortiSIEM 7.2 on Rocky Linux 8.8 (Green Obsidian) after fresh install it went down. (see the image) Thank you!

For some reason, my Fortigate 40F (v7.0.13 build0566) is losing the date and time settings when it loses power (maybe the battery is dead) and when the power comes back on, the Fortigate displays the message "Fortigate time is out of sync". I have already set the Fortigate to use the NTP server 200.160.0.8 but it does not work. When running the command "diagnose sniffer packet any 'host 200.160.0.8' 4" I can see the UDP requests being generated from my public IP, but no response is received.  In "Fortiview sessions" no sessions are displayed.If I define this NTP server on a LAN host it works perfectly.It seems that the problem only occurs when the traffic is generated by the Fortigate itself towards the IP 200.160.0.8. Could this be a bug in this firmware version?

In my test environment, I migrated from FortiEMS client 7.2.2 to 7.4.4.We deployed EMS on a Hyper-V VM.After a few manual tests, we'll migrate the remaining endpoints to the Linux EMS server by changing the EMS DNS record.How can I generate an overview of the EMS servers with endpoint connections/registrations?

when connect to FortiClient by laptop we lost the internet connection during VPN connecting (IPsec VPN), but when we use a mobile we don't lose the internet. How can we keep the internet connected using the laptop?note that the default route exist, the ping to 8.8.8.8 stopped even the default route exist

 Hi all! I am working with a FortiGate firewall that has an internet connection with a static IP.Our goal is to route the default gateway through an IPsec tunnel that breaks out via the headquarters. When configuring SD-WAN, a default route (0.0.0.0/0.0.0.0) is created toward the SD-WAN zone.Inside this SD-WAN setup, the IPsec tunnel is included with a performance SLA, so that the route is automatically disabled if the tunnel becomes unavailable. In this case, traffic should then fail over to the physical WAN interface.However, for the IPsec VPN, an inbound and outbound policy is required without NAT.These policies are placed at the top of the policy list: from IPsec to SD-WAN, and from SD-WAN to IPsec.The complication arises when the physical WAN interface is also placed inside the SD-WAN zone.In that scenario, NAT is required; otherwise, internet traffic via the local ISP will not work. One possible solution is to configure the physical WAN interface outside

I have an upcoming job where I’ll be installing and configuring a FortiGate to serve as the edge router at a facility currently running an all-Cisco internal network (from a previous contractor). The long-term plan is to replace all Cisco devices with Fortinet gear, but to avoid downtime, the Cisco network will continue operating through the FortiGate for now.Currently, a Meraki MX400 is acting as the edge router. Since we’re unsure of its configuration and I haven’t worked with one before, we don’t want to remove it yet. Instead, the MX400 will connect to the FortiGate, which will then connect to the ISP. We’ll begin building the new network off the FortiGate while keeping the existing Cisco network running through the MX400.The MX400 already performs NAT, so I want to avoid double NAT on the FortiGate. Would the correct approach be to create a firewall policy on the FortiGate for the interface handling Cisco traffic and simply disable NAT? 

Hi! Recently the new FortiOS 7.6 was released, so being an enthousiast I upgraded a new F40 straight out of the box.After the update the devices booted but I could not reach it by it's default IP.Booting the device via console, I got error messages about interfaces en the configuration. A few of these messages are:Initialize config error 44010The config file may contain errors.Please see details by the command 'diagnose debug config-error-log read'. The initial boot gives strange characters until it shows "system is starting" and after that everything is perfectly readable.After the device booted I am unable to type anything in de commandline.So, after this line it is stuck: Please see details by the command 'diagnose debug config-error-log read'. I also tried different serial configuration (baud rate etc.). But that doesn't do the trick.During boot I'm able to press a key but all the characters are gibberish, so a flash format is a challenge.  I

Anyone know are we able to query the SDWAN SLA performance to geeting information about jitter, packet loss and latency using CLI, SNMP or any other way?I have requirement to insert the SLA performance to the SQL database so I can make custom report for specific SLA performance.If we see in the SDWAN performance SLAs there are graph but is limited only to 10 minutes time window and i need more longer.

I recently purchased a Fortigate 50G, and the firmware on the device is v7.0.17 build7598 (Mature). I see possibility of upgrading beyond 7.0.17 but it doesn't see to be possible through the GUI. Also when I check the Firmware images available in Support section of Forticloud I don't find any firmware for 50G, I find them only for 50G-5G.Any info how I can upgrade?   

Hello,one of our customers will like to know if is possible to setup FortiMail FortiSandbox configuration so, that it will not prepend "[Scan Notification] Attachments are held for scanning" text to body and subject, when the message will be processed in the fortimail sandbox for a long time? ThanksMarko

I have this case with FortiMail 7.4.5 VM FortiMail has the following configuration for sending quarantine report config antispam quarantine-reportset schedule-hours 7 8 9 10 11 12 13 16set schedule-days monday tuesday wednesday thursday friday saturdayset web-release-hostname aaaa.bbbb.comset web-release-unauth-expiry 72end However, it only sends all reports at 09:00, despite new spam emails arriving at different times.For example: a user received spam yesterday at 18:40. That email should have been included in today’s 07:00 report, but the report was never sent. Another user received a spam email today at 09:15. It should have been included in the 10:00 report, but no new reports were sent after today at 09:00. I tried running "execute reload cronserviced", but there was no change.  

Hi everyone,Is it possible to tell FortiPAM that users can only connect to WebRDP if they have the extension installed? Because now they can't even connect clientless.Thanks

One of our remote offices has been having intermittent internet issues (thanks Comcast). From what I have been able to find, by default FortiGates don't do much health monitoring on WAN connections, and that if I want WAN health monitoring I need to configure SD-WAN. I have never configured SD-WAN before and wanted to avoid any gotchas. Some of the questions I have about SD-WANHow does configuring SD-WAN affect any WAN firewall policies? Do these need to be updated to point to the SD-WAN instead of WAN?We have a static IP, any concerns with SD-WAN and Static IPs?Will configuring SD-WAN mess with any IPSEC or SSL VPNs?We don't pay for FortiAnalyzer, without that will it make any Health Monitoring useless? 

I wasn't able to connect to an IPsec VPN through FortiClient VPN (7.0.2.0090 free) when updated to Windows 11 (build 22000), SSL VPNs were working fine. When I downgraded to Windows 10 (21h2 build 19044.1415) the IPsec VPN started working again. This is the error that I got on FortiClient  And this is the log that I exported   12/28/2021 4:02:55 PM info sslvpn date=2021-12-28 time=16:02:54 logver=1 id=96602 type=securityevent subtype=sslvpn eventtype=status level=info uid=19AEBE88942A48F59578C42AA765D590 devid=FCT8003159070034 hostname=DESKTOP-5BJFTJ3 pcdomain=N/A deviceip=192.168.224.1 devicemac=<redacted> site=N/A fctver=7.0.2.0090 fgtserial=FCT8003159070034 emsserial=N/A os="Microsoft Windows 11 , 64-bit (build 22000)" user=bueno msg="SSLVPN service started successfully" vpnstate= 12/28/2021 4:03:04 PM info system date=2021-12-28 time=16:03:03 logver=1 id=96823 type=systemevent subtype=system eventtype=status level=info uid=19AEBE88942A48F59578C42AA76

I'm currently working with FortiAuthenticator and I would like to know if it's possible to customize the login page, specifically to:Add our company logoPossibly change or style some elements of the page for branding purposes If this kind of customization is supported, could someone please guide me on how to achieve it or point me to the relevant documentation?Thank you in advance for your support!Best regards,

Hi there, On entry-level FortiGate models, the SSL-VPN web portal breaks after the update to FortiOS 7.4.8. Update 2diagnose debug console timestamp enablediagnose debug application sslvpn -1diagnose debug application fnbamd -1diagnose debug enable 2025-06-05 11:17:43 [17810:root:4]fsv_check_path_passed:997 No access: check path failed /migadmin/rmt_index.html, /data/migadmin, /migadmin 2025-06-05 11:17:43 [17810:root:4]sslvpn_zip_handler:136 sslvpn check path failed. 2025-06-05 11:17:43 [17810:root:4]fsv_check_path_passed:997 No access: check path failed /migadmin/sslvpn/css/ssl_style.css, /data/migadmin/sslvpn/css, /migadmin/sslvpn/css 2025-06-05 11:17:43 [17810:root:4]sslvpn_zip_handler:136 sslvpn check path failed. Update 3The issue has been identified as BUG ID 1164811: https://docs.fortinet.com/document/fortigate/7.4.8/fortios-release-notes/236526/known-issues

When we build VPN site to site we defince local and remote subnet, and also there are option to add route.When we enable the add route option why we still need make static route?If no static route I'm not able access to the remote subnet.

Hi, I'd like to know what directional antennas are supported by FAP-432G-N. 

 Hello, In our FortiSIEM environment, we are receiving the following health warning:---> Event Pipeline: Warning (Collector Buffer between 20MB and 50MB) After checking the logs, I observed that the collector is trying to upload events to a worker, and the destination IP is the collector’s own IP address. However, we are not using any workers in this deployment – only a Supervisor and a Collector. Because of this, the collector keeps sending HTTP requests to itself, receives a failed response, and then writes the events into:" /opt/phoenix/cache/parser/events/ "  This continuously increases the collector buffer size. As a temporary workaround, I manually delete the .dat files in that directory, which clears the warning, but the issue reappears after a short while because the collector continues to target its own IP. What would be the correct permanent solution for this issue? Best Regards,İsmail Ürek

Hello everyone, We’re looking for guidance on an issue with FortiGate IKEv2 + SAML (Microsoft Entra ID). Below are the key details and symptoms. EnvironmentAppliance: FortiGate 201GFortiOS: v7.6.4 build3596 (Feature) SymptomsFortiClient opens the Microsoft Entra sign-in page and we receive the MFA push.After approving MFA, the client returns “Firewall Authentication Failed.”We are not able to access the ACS URL from the web. We get this page can’t be reached. What we didWe followed the community article for Microsoft Entra ID SAML with FortiGate IPsec (IKEv2) and Fortinet’s official IPsec+SAML guide step by step, but the issue persists.  Note: Before switching, we were using RADIUS for authentication and it was working. Any advice on additional checks or known caveats with FortiOS 7.6.4 for IKEv2 + SAML would be appreciated. Thank you!

Hello Fortimanager admins,  I’ve encountered an unusual issue and would like your feedback. After connecting my FortiManager (v7.4.7) to a preconfigured FortiGate (v7.4.8), the firewall’s configuration was lost. The networking configuration (such as interfaces) remained intact, but all other settings disappeared.The only action I performed was importing the firewall’s configuration into FortiManager as usual.Has anyone experienced this behavior or knows why it might happen? Thanks in advance,

Hi teamsI am using a FortiGate firewall with stateful inspection enabled, and we'd like to understand the packet processing logic for return traffic.Could you please share any information you have on this?Specifically, I am looking for an explanation of return traffic similar to the one provided in the following URL: https://docs.fortinet.com/document/fortigate/6.0.0/parallel-path-processing-life-of-a-packet/478386/packet-flow-ingress-and-egress-fortigates-without-network-processor-offloadingI am currently considering whether to address return traffic by adding a policy route or by adding a less-preferred static route. Our main question is whether the routing table is consulted at all for stateful return traffic.Thank you Kenji

Hi, yesterday a Firewall Policy was accidentally deleted on Fortinet (v7.0.11). In Log Events I only see "Delete firewall.policy 37". How and where can I see what the policy did so that I can recreate it?Thanks.