Solved

I have a need to NAT outbound traffic to a specific Range if the traffic needs to go across a L2L tunnel. Remote customer gave us a range, so traffic going to them is 'seen' as from that range. I have the L2L tunnel up, how do I make the fortigate nat the traffic?  Thx

Hi,In an A-P HA cluster, with the Master down (Slave has become Master), what happens when I go and change config and the actual master comes back and takes over as master again? Will there be a config sync issue?Thanks for any insight. Bye,Marki

Hi my foriclient has been working fine for 3 months until today,  on Windows 10.  Defender is disabled,  no other AV / Spyware etc installed.... have confirmed that Defender isn't running Started the PC today and I am seeing the windows notification panel flashing constantly with "Update Virus Protection Virus Protection is out of date, Tap or click to update Foritclient Antivirus" which is then after a second or so is replaced with "Update Spyware Protection Spyware Protection is out of date, Tap or click to update Foritclient Antivirus" This cycles constantly,  if I click the notification, occasionally a windows Security and Maintenance window appears asking me do i want to run this app... the app is "c:\program files (x86)Fortinet\forticlient\FCWsc.exe" ... I allow this... nothing then appears to happen I can't open the Forticlient Console,  click the tray icon,  select open console... nothing happens. Can't uninstall as the For

Hi Guys, I did not passed for the NSE 400 exam last week ( 63% :( ). One of the Q's was as follows: Which model's supports built-IN enabled DHCP while installing the Fortigate for the first time. I cannot find any documentation and/or list which describes this. Could someone know which model's does? Thanks in advance!

Hello,i have fortigate 200D i want some one tell me how to download and install fortianalyzer  thanks

I have a 600C with a recurring crash problem.  It is running 5.0.11, but the problem has persisted since 5.0.4 or so. About every 1-3 months, the gui will show that all interfaces are connected at 1GBPS and that each port has sent/received approximately 191 billion packets if I over over a port (not shown below).    Once the gui reaches this state, it is usually about 2-3 days before the firewall stops working altogether. At that point, I need to do a full power down/power off reset. If I just do a warm boot, it will not recover and will stop mid-boot with an error message. Has anyone experienced anything similar with a 600C? I am beginning to think this is a hardware issue. Suggestions welcome. Thanks.  

Hello, I am pretty new to Fortigate products, so sorry in advance for any confusion in my post. I am using a fortigate 60D in dual WAN and using it as NAT mode. We have three ISPs at work, and want to use two ISPs at the same time to do traffic load balance (currently static routes are used for particular traffics), and want to use the third ISP as a backup for automatic failover. Is there any way how I can use the DMZ port as WAN3 to achieve above?

Hello! Guys, need help to solve the problem. There is one ISP, one cable is connected to the first port of FG300D. I have a block of IP addresses – for NAT and Transparent modes. I need to create 2 VDOMs - one of them will work in NAT mode, the other will be in Transparent. Unable to add already used by root VDOM WAN interface to the second VDOM (Transparent). Is it possible?I’m sorry for my English  - I am doing my best )))  

helloi'm looking for a guide (video) to configure exchange 2010 on fortigate 80d.Thanks

Windows 7 Pro SP1 64bit laptops - I've had just a couple of laptops that I can't install the client on.  I'm using the ForticlientOnlineInstaller.  Windows throws the msg, and I have to rollback the install.I've used gpedit.msc - User Configuration - Admin Templates - System - Driver Installation - Code signing for device drivers - Enabled - Ignore - reboot - to tell Windows to ignore the unsigned driver.  But still no luck, same msg from Windows.Is there a difference between the FortiClientSetup_5.4.0.0780_x64.zip client and the OnlineInstaller.exe?And does anyone have a fix for this issue?  I doubt that I'm first one down this road.It could be something within Windows on those particular laptops.  

What about the new 40e, compared with 60d? Best regards and appy new year

Can the wireless built in to a FortiWiFi 60D be used in conjunction with a FortiAP 221C? In one Fortinet installation the coverage from the single FortiAP 221C is barely adequate. Using the FortiWiFi wireless would help the coverage. It looks from the UI on the FortiWiFi 60D that this is possible but I'm not sure if it is.

helloi am a new user for fortigate60d i want to make a manual maj for antirus and idps in my fortigate60d but it failed..this is an extract to my console manager when i download the signature on fortinet.support  i choose os 5.00 can we confirm me that's correct.i dont understand why the maj is failed sorry for my language but i am french .thanks to help me  

Hi guys! I have a Fortigate 60C which cannot be upgraded to 5.4, however my FortiAP supports FortiOS 5.4.Do you know if it's possible to manage the FortiAP (v5.4) from my Fortigate (v5.2.5)?I will not try this until it's confirmed, there is no support for downgrade from 5.4.  

Hi All, Does Fortigate support recursive DNS?,correct me if I'm wrong, based on my testing Fortigate only assigned same systems DNS or interface (DHCP) like other other firewall brand. At this moment I have a client which using pfSense as their primary firewall and DHCP server assigned client DNS and gateway pointing to firewall internal interface. Appreciate if anyone can clarify or guide me if there any setting that miss looked for the recursive DNS feature.Thanks  

Hi all,I've got a strange behaviour but I cannot figure out why.I have a couple of ADSL modems (in bridge mode) connected to wan1 and wan2 of my fortigate 60D.I created a load-balanced wan on the firewall which.The modems have an IP on 192.168.200.0/29 where the management GUI responds.To be able to reach these addresses  I created a policy which NAT the packet directed to this address behind an address belonging to the same network.Then I created a static route to direct the packet to the right interface, wan1 or wan2, depending on the destination target.Despite this I can reach one modem GUI only while the other is not responding.Of course If I directli connect the modem to my PC I am able to browse its GUI.Do you have any idea about what I am missing? Here you are the flow trace of the packet directed to the modems:  MODEM1 (working) id=20085 trace_id=7 func=print_pkt_detail line=4469 msg="vd-root received a packet(proto=1, 10.9.10.100:21859->192.168.200.

Hello, If I make a dial up vpn and use the forticlient on the clients.  Am I correct in assuming the only fee based part is the AV built into the client?  I can use the client without a subscription if it is just used to bring up a tunnel? Thanks, ponder

Hello, High level, I have a 100D running OS 5.4, 2 ISPs with multiple public static IPs.WAN 1 and WAN 2 are setup in WLLB so traffic uses WAN1 with Failover to WAN2. I have configured 2 Hardware Switches grouping ports 1-8 for LAN and ports 9-12 for VoIP.My configuration is setup where the LAN in on a separate subnet (and internal switch) from the VoIP.I use WLLB Rules to route VoIP traffic out WAN2 and rely on the WLLB to control failover support. Now, I would like to setup an additional port (port 15) as another WAN port with a static IP from my WAN1 ISP provider.I'll use this port as my endpoint for site to site IPSec VPN tunnels and would like to route the traffic to the LAN subnet.When I try to configure the port (which is in interface mode) to an external IP, I get an error message that the subnet conflicts with WAN1.  Am I missing a step or is there a better way to configure an additional WAN port on the same external subnet?Other suggestions? Thank

HelloI updated my FortiClient today on my Mac with 10.8.5.  When I try to log in using Remove Access I now get the above error message.How do I correct?Or can I download the older version ( 5.0.6) that worked fine with Remove Access. ThanksTim

Hi All, Appreciate if you guys can clarify or assist since I'm quite new with Fortigate product. current Fortigate 60D has been configured VLAN interface on physical port, My question is does the firewall policy or routing is required for inter vlan communication?. Thanks

Hi all,while I was looking at log (forward traffic) I realized that my Fortigate was unable to recognize application. In the "application name" column there is written for all packets logged unknown.Do you have any idea about what is happening?I am using a Fortigate 60D with 5.2.5 firmware Thank You Regads 

Hi All, As per subject above does inter vlan communication is required policy for configuration as screenshot attached below?. Thanks       

Hey guys, Question about the fortigate 100D cluster we have.Outside ip is part of a subnet (18X.xxx.xxx.100 / 255.255.255.128) We are in the process of starting a new hosting platform, that will get multiple outside ip's from that range.Above the fortigate there are 2 cisco switches, on wich the range is configured in a vlan.Is it possible to let the new hosting platform traffic to go through the Fortigate, and be protected by IPS and other features?Í'm not seeing it at the moment so maybe one of you can point me in the right direction. NAT is also in place, and needs to stay in place for some other functions, so transparent mode is not an option. Any help is much appreciated

I have lots of objects. They are, for example, Object_1 - 10.0.0.10Object_2 - 10.0.1.10Object_3 - 10.0.2.10Object_4 - 10.0.3.10...Object_n - 10.n.n.10 They I put all the objects on a Group, and then on a Firewall Policy. Is there any way to do this better/easier?I want to avoid having a slow Firewall (I have a 900D). Thanks!

Hi all, I'm using a fortigate unit with Ipv4, IP are manually entered in every-one's computer. I have two interfaces, (1) with 10.18.x.x IP and (2) with 172.25.1.x IP. Im suspecting an IP conflict occured on the 172.21.1.x range but when I go to the Fortigate administration panel, User & Device > Device > Device Definition,  no devices connected to the interface (2) are shown, when there are at least three servers.Where can I find information about the devices connected to my interface (2) (or actually every interfaces) ?I access the administration panel with a computer connected to interface (1), I don't know if it's relevant. Thanks,