Solved

Windows 7 Pro SP1 64bit laptops - I've had just a couple of laptops that I can't install the client on.  I'm using the ForticlientOnlineInstaller.  Windows throws the msg, and I have to rollback the install.I've used gpedit.msc - User Configuration - Admin Templates - System - Driver Installation - Code signing for device drivers - Enabled - Ignore - reboot - to tell Windows to ignore the unsigned driver.  But still no luck, same msg from Windows.Is there a difference between the FortiClientSetup_5.4.0.0780_x64.zip client and the OnlineInstaller.exe?And does anyone have a fix for this issue?  I doubt that I'm first one down this road.It could be something within Windows on those particular laptops.  

What about the new 40e, compared with 60d? Best regards and appy new year

Can the wireless built in to a FortiWiFi 60D be used in conjunction with a FortiAP 221C? In one Fortinet installation the coverage from the single FortiAP 221C is barely adequate. Using the FortiWiFi wireless would help the coverage. It looks from the UI on the FortiWiFi 60D that this is possible but I'm not sure if it is.

helloi am a new user for fortigate60d i want to make a manual maj for antirus and idps in my fortigate60d but it failed..this is an extract to my console manager when i download the signature on fortinet.support  i choose os 5.00 can we confirm me that's correct.i dont understand why the maj is failed sorry for my language but i am french .thanks to help me  

Hi guys! I have a Fortigate 60C which cannot be upgraded to 5.4, however my FortiAP supports FortiOS 5.4.Do you know if it's possible to manage the FortiAP (v5.4) from my Fortigate (v5.2.5)?I will not try this until it's confirmed, there is no support for downgrade from 5.4.  

Hi All, Does Fortigate support recursive DNS?,correct me if I'm wrong, based on my testing Fortigate only assigned same systems DNS or interface (DHCP) like other other firewall brand. At this moment I have a client which using pfSense as their primary firewall and DHCP server assigned client DNS and gateway pointing to firewall internal interface. Appreciate if anyone can clarify or guide me if there any setting that miss looked for the recursive DNS feature.Thanks  

Hi all,I've got a strange behaviour but I cannot figure out why.I have a couple of ADSL modems (in bridge mode) connected to wan1 and wan2 of my fortigate 60D.I created a load-balanced wan on the firewall which.The modems have an IP on 192.168.200.0/29 where the management GUI responds.To be able to reach these addresses  I created a policy which NAT the packet directed to this address behind an address belonging to the same network.Then I created a static route to direct the packet to the right interface, wan1 or wan2, depending on the destination target.Despite this I can reach one modem GUI only while the other is not responding.Of course If I directli connect the modem to my PC I am able to browse its GUI.Do you have any idea about what I am missing? Here you are the flow trace of the packet directed to the modems:  MODEM1 (working) id=20085 trace_id=7 func=print_pkt_detail line=4469 msg="vd-root received a packet(proto=1, 10.9.10.100:21859->192.168.200.

Hello, If I make a dial up vpn and use the forticlient on the clients.  Am I correct in assuming the only fee based part is the AV built into the client?  I can use the client without a subscription if it is just used to bring up a tunnel? Thanks, ponder

Hello, High level, I have a 100D running OS 5.4, 2 ISPs with multiple public static IPs.WAN 1 and WAN 2 are setup in WLLB so traffic uses WAN1 with Failover to WAN2. I have configured 2 Hardware Switches grouping ports 1-8 for LAN and ports 9-12 for VoIP.My configuration is setup where the LAN in on a separate subnet (and internal switch) from the VoIP.I use WLLB Rules to route VoIP traffic out WAN2 and rely on the WLLB to control failover support. Now, I would like to setup an additional port (port 15) as another WAN port with a static IP from my WAN1 ISP provider.I'll use this port as my endpoint for site to site IPSec VPN tunnels and would like to route the traffic to the LAN subnet.When I try to configure the port (which is in interface mode) to an external IP, I get an error message that the subnet conflicts with WAN1.  Am I missing a step or is there a better way to configure an additional WAN port on the same external subnet?Other suggestions? Thank

HelloI updated my FortiClient today on my Mac with 10.8.5.  When I try to log in using Remove Access I now get the above error message.How do I correct?Or can I download the older version ( 5.0.6) that worked fine with Remove Access. ThanksTim

Hi All, Appreciate if you guys can clarify or assist since I'm quite new with Fortigate product. current Fortigate 60D has been configured VLAN interface on physical port, My question is does the firewall policy or routing is required for inter vlan communication?. Thanks

Hi all,while I was looking at log (forward traffic) I realized that my Fortigate was unable to recognize application. In the "application name" column there is written for all packets logged unknown.Do you have any idea about what is happening?I am using a Fortigate 60D with 5.2.5 firmware Thank You Regads 

Hi All, As per subject above does inter vlan communication is required policy for configuration as screenshot attached below?. Thanks       

Hey guys, Question about the fortigate 100D cluster we have.Outside ip is part of a subnet (18X.xxx.xxx.100 / 255.255.255.128) We are in the process of starting a new hosting platform, that will get multiple outside ip's from that range.Above the fortigate there are 2 cisco switches, on wich the range is configured in a vlan.Is it possible to let the new hosting platform traffic to go through the Fortigate, and be protected by IPS and other features?Í'm not seeing it at the moment so maybe one of you can point me in the right direction. NAT is also in place, and needs to stay in place for some other functions, so transparent mode is not an option. Any help is much appreciated

I have lots of objects. They are, for example, Object_1 - 10.0.0.10Object_2 - 10.0.1.10Object_3 - 10.0.2.10Object_4 - 10.0.3.10...Object_n - 10.n.n.10 They I put all the objects on a Group, and then on a Firewall Policy. Is there any way to do this better/easier?I want to avoid having a slow Firewall (I have a 900D). Thanks!

Hi all, I'm using a fortigate unit with Ipv4, IP are manually entered in every-one's computer. I have two interfaces, (1) with 10.18.x.x IP and (2) with 172.25.1.x IP. Im suspecting an IP conflict occured on the 172.21.1.x range but when I go to the Fortigate administration panel, User & Device > Device > Device Definition,  no devices connected to the interface (2) are shown, when there are at least three servers.Where can I find information about the devices connected to my interface (2) (or actually every interfaces) ?I access the administration panel with a computer connected to interface (1), I don't know if it's relevant. Thanks, 

Hello, We are trying to establish a VPN between a Fortigate 900D and a Juniper. It must be a DialUp VPN since the Juniper has PPPoE (not a static IP) and the version of JUNOS the device has don't support dynamicdns. The Juniper has the following configuration:security { ike { proposal ike-phase1-proposal { authentication-method pre-shared-keys; dh-group group2; authentication-algorithm sha1; encryption-algorithm 3des-cbc; lifetime-seconds 28800; } policy ike-phase1-policy { mode aggressive; proposals ike-phase1-proposal; pre-shared-key ascii-text "12345678"; } gateway gw-test { ike-policy ike-phase1-policy; address 189.1.1.1; local-identity hostname TEST; external-interface fe-0/0/0.0; } } ipsec { proposal ipsec-phase2-proposal { protocol esp; authentication-algorithm hmac-sha1-96; encryption-algorithm 3des-cbc; lifetime-seconds 3600; } policy ipsec-phase2-policy { perfect-forward-secrecy { keys group2; } proposals ipsec-phase2-proposal; } vp

Hello!I havn´t found any rough numbers for VM Sizing.For example, let´s say we have 150 Devices, logging about 15Gb logs/day with about 5000 logs/s. We are currently planning on getting a VM license and hardware for the build. But I am uncertain about the memory/CPU config.Looking at a current 400C with roughly 30 devices and about 5GB/day, the memory in use is not much. The cpu usage is higher when generating reports. So I am thinking about a 6 Core with HT, 16GB mem and ofc something like Intel 3510 drives in Raid 5.Anyone have any VM data to share?

I'm new to the Fortigate Family. So, please bear with me. I have a website (Doodle.com), that's blocked, but I don't know how to check why? I get the error message from FortiAnalyzer and it does say Policy ID # but I can't seem to find that number in my fortigate's firewall policies. Does anyone know how to figure out why it's being blocked? Thanks!

Hi, I'm trying to install Forticlient in a Windows 7 computer. The problem is that, during the installation, it fails once it reaches the "Starting services" phase. The installation software shows an error message that says: "Service Fortishield failed to start. Verify that you have sufficient privileges to start system services". After that, the installation just rollbacks. The computer only has one user account (Administrator), and I have tried running it explicitly as an administrator, but the situation doesn't change. Any solution? Best regards

Hello, Where can I find the downloads for the FortiGate VM?  I can find the page with all the different firmware versions, but I seem to be struggling to find the VM. Any help? Thanks,ponder

Hello, I currently use a QoS configuration on a Cisco device and I wish to move this function on a Fortigate firewall (Fortigate 200B v5.2.0). On the Cisco device, QoS is defined as following: - services class are defined:  GOLD (trafic to prioritize) / OTHER (trafic to "unprioritize") / SILVER (all other trafic) / (policy-map) - the network traffic is selected by ACL (access-list). - each ACL is associated to a service class (class-map) - dedicated ACL are apply on interfaces On the Fortigate firewalll, I would like to know how to define the same QoS policy with following requirements: - for a simple managing, I wouldn't like manage several QoS profile on the rules. - Is it possible to configure a global QoS policy in other place than rule filter configuration ? - on each rule, I would like to manage only a global QoS policy. - this feature seems not describe in the documentation, is it possible to do that ? May be in CLI configuration mode with dedicated commands ? Thank yo

We have WiFi networks with WPA2 Enterprise security successfully working in our environment. After recent firmware upgrade from v.5.2.3 to v.5.2.5 on all our FortiGate and FortiWifi boxes, old computers with Windows XP on them cannot connect to the wireless networks any longer. Although we do not have many Windows XP installations left - none of them cannot connect to WPA2 Enterprise wireless networks. There was no such a problem before the upgrade. All our FortiAPs units (FAP 220B, 320C, 321C) have the latest (v5.2.4 build 0245) on them. Does anyone experience the same issue? Thank you for any thoughts and ideas.

Dear All,I am setting a test policy that required FSSO AD authentication.I have done the following successfully1) LDAP Server created successfully and test was success 2) Single Sign-On Created sucessfully with status connected. 3) FSSO using DC-Agent is installed successfully in my DCverified from CLI[FORTIGATE] # diag deb auth fsso server-status [FORTIGATE] # Server Name Connection Status Version ----------- ----------------- ------- FORTINET_AGENT1 connected FSSO 5.0.0241but when i do the following :[FORTIGATE] # diag deb auth fsso list ----FSSO logons---- Total number of logons listed: 0, filtered: 0 ----end of FSSO logons----it seems to me that the FSSO agent is not working successfullyi verified the data of the logon users in FSSO Agent i can retrieve a list of AD users that is logon in my environment.i double checked all the steps and configuration. everything is as per specified in official guide.what went wrong here ?any pointer ?

Hey guys, Brand new to Forti products and I have a short time line. I am looking for a good how to in order to setup S2S VPNs in fortimanager. I have only been able to find pieces can someone help?