Solved

Hi, I feel a bit stupid: Where can I find firmware for the FWF 92D? In the support portal images stop with FWF90D. I have a unit here running FWF92D-5.00-build292 which is quite old and I am desperately trying to update to a 5.2.2... Is there a secret site with really all firmware images? Help very much appreciated! Thanks in advance. Bye,Tim

Dear Friends,                    what is the default ip address of forti ap 221b?

Hi, Fortianalyzer (FortiAnalyzer-VM64) has recently become one of the software I'm overseeing and I see its a very powerful tool.  THIS happened in the morning. Please, let me know about the ways to resolve this logging issue.  Thanks

Hello, We use the FortiGate as a proxy with the FortiAnalyzer logs. We wish to have the reports Detailed of : - The bandwidth of each group, users, subnet, apllication. Great thx

Using 5.2.2For years, we've had load balancing set up on our terminal servers in house using the simple microsoft NLB (172.16.1.45 is address for our NLB addres, 172.16.1.45 is also the secondary ip address on multiple TS servers). Traditionally, we had a simple NAT set up for an external IP to point to 172.16.1.45. This worked just fine and users would log in on either of the TS's without a problem. Since implementing the fortigate 200d a few weeks ago, we've noticed that all users are only connecting to ONE of the TS's. (TS1) I simply created a Virtual IP with the external address and 172.16.1.45 as the internal address, then created a rule that allows traffic from source = ALL to Destination = TS Load Balancer, with only RDP (port 3389) allowed. If I do a netstat -n on the terminal servers, all of the connections are showing the IP address of the Fortigate, instead of the clients actual external IP address. Even connecting DIRECTLY to a TS (without using the NLB)

Hii All, Need your help please.I have 2 fortigate 1000c on HA active-active mode, 2 forticare 24x7 (FC-10-01003-247-02-DD) and 2 fortiguard NGFW service (FC-10-01003-108-02-DD). I've been register it on www.support.fortigate.com .It’s work properly for forticare Support Contract 24x7 (FC-10-01003-247-02-DD) But I have problem with Fortiguard Service NGFW  (FC-10-01003-108-02-DD) licence.On my secondary (slave) it’s work fine. But on my primary I can’t get connection on Antivirus and Webfiltering Database  On my Fortiguard Service antivirus, Email Filtering, and  Web Filtering not update, I think the problem is about port of AV and Web Filtering Database but I’ve check on System > Config > Fortiguard, Web Filtering and Email Filtering Options … I test both of port (53 and 8888) and result is “This unit does not have a valid license”  How can I solve this problem ?  

I'm running a 100D with 5.2.2  We will be upgrading to a 300D later this year.  Overall, I think 5.2.2 is a good release, but there are some improvements that I think would benefit users. We have some Objects\Addresses\Groups with over 100 domains.  When you attempt to add a new domain to one of those lists, it prompts you to add at the bottom which tends to scroll off the bottom of the screen.  Better to prompt at the top of the list so it can be seen. It would be incredibly helpful to be able to import and export lists in CSV or TAB format for review.  (Native Excel would be even better!).  This would help with bulk edits (as long as you could import them back in also!) and make it much easier to maintain large lists and spot discrepancies.  I'm specifically speaking of Addresses Groups lists, and Static URL Filter lists in Web Filters. In 4.3.18, I was able to both block and allow specific files by name or pattern.  In 5.2.2 I'm

Hi I want to add user column below dataset. I didn't add user column. Can you help me for this dataset. select domain, sum(bandwidth) as bandwidth from (###(select coalesce(nullifna(hostname), ipstr(`srcip`)) as domain, sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0)) as bandwidth from $log-traffic where $filter and logid_to_int(logid) not in (4, 7, 14) and utmevent in ('webfilter', 'banned-word', 'web-content', 'command-block', 'script-filter') group by domain having sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0))>0 order by bandwidth desc)### union all ###(select coalesce(nullifna(hostname), ipstr(`srcip`)) as domain, sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0)) as bandwidth from $log-webfilter where $filter and (eventtype is null or logver = 52) group by domain having sum(coalesce(sentbyte, 0)+coalesce(rcvdbyte, 0))>0 order by bandwidth desc)###) t group by domain order by bandwidth desc

Hi there, i need help configuring a new dataset in FortiAnalyzer 5.2.1. It is a very simple query but I don't get it running due to a lack of SQL knowledge  I need a dataset for dial-up vpn (sslvpn and ipsec vpn) which only should show username and date.I tried with the query:select from_dtime (dtime) as date, `xauthuser` as Benutzer, tunneltype from $log where (tunneltype= 'ssl-tunnel' or tunneltype='ipsec') and action='tunnel-up' order by date desc Problem is that for sslvpn the user attribute is "user" and for ipsec vpn it is "xauthuser". So I need a query which gets the attribute "user" for sslvpn and attribute "xauthuser" for ipsec BUT the usernames from both sslvpn and ipsec needs to be put in the column "Benutzer". Could you please help me? Thanks and Cheers,Mattias

.

Hello folks! First off, I'm sure I've done something wrong, fully willing to admit it. I very recently upgraded to a Fortigate 60C from a 60B (Boss gave it to me for training purposes) and I had no issues with port forwarding on the older unit. Worked like a charm.Now I'm running the 60C, I can't seem to get the port forward to work.  First off, I'm running the following:Device: Fortigate 60C (Rev. 1)Firmware: v5.2.2,build642 (GA)Internal Switch Mode: Interface (just to match our work environment for learning/testing purposes)Security Features: All of them have been turned off for this testing (No AV, Intrusion Protection, etc) I'm trying to do a port forward for a game server on my internal network. I've configured the server as a reserved DHCP so it will always have the same IP. I've created a Virtual IP for the port that needs to be forwarded (picture), then created a VIP Group and put the VIP into it. Then, I've created a IPv4 policy to forward traffic from

Hello all, I have to implement policies on a Fortigate 200D (running version 5.2.2).First, I need to allow all Lan users access to some websites they need for work.Some of the websites are specific (www.google.com), some of them use wildcard (ie *.fortinet.com).I created a policy LAN ---> WAN1, source: all, destination: FQDN of the websites, allow all services.This policy is the first in my policy list, from LAN to WAN1.Then i created user identity policies with user groups defined in SSO authentication, with the required web accessrestrictions.However, i do not get any hit counts on my first policy, the one allowing all LAN users to specific web destination.I know u cannot create FQDN address object with wildcard address.Maybe there is a better way to implement my requirements. Any help on this please?ThanksJaures.  

Hi all,Some time back when running v4.3.something firmware, we sent all our syslog(514) data to our Fortianalyzer.  My recollection is that the functionality was lost when we upgraded to v5.0 firmware.  Couple of questions for those running v5.2 now:(1) is the syslog functionality back?  Can you use the Fortianalyzer as a syslog server again?(2) if using this, how does the functionality look to you?  Is it substantially different to what was available in v4.3 firmware?(3) is it possible to filter the incoming syslog data in any way (so that not all data is logged)?TIA for any information you can share,Frosty

In Fortigate VM64 ver October 2014 on port1 and port2.It has PROBE-RESPONSE. QUESTIONS:1. Is PROBE-RESPONSE for checking sync attack2. If yes, that mean I should set it as WAN port instead of LAN port, because attack mostly from internet  tq  

Hi, In F5, I can set it to detect failure of web server based on response.For example, sometime web service is up but database server that it connect to is down.F5 can be programmed so that it can detect if it access this page, the response should be this. QUESTIONS:1. can FortiADC do that instead of detect port alive or can be pinged tq

Hi I have fortigate 80d running 5.2.1 and fortiAP 221C. The 221C support 14 SSID but when i create mora than 8 SSID. it gives me error that "maximum value has been reached".  Any Idea ?? Thanks 

Are there any commands to easily reveal what diagnose commands are enabled and/or active? Part 2:  Will all diag commands be disabled (inactive) upon FGT reboot? Part 3: Expanded question: (global) # diag debug info debug output:           disable console timestamp:      disable console no user log message:    disable zebos debug level:      306783954 (0x124926d2)   <<??? CLI debug level:        3 (global) # diag debug reset (global) # diag debug info debug output:           disable console timestamp:      disable console no user log message:    disable CLI debug level:        3 What does "zebos debug level:      306783954 (0x124926d2)"   me

Trying to load Forticlient on a new laptop and the download install ends with: No updates found. You already have the latest version of FortiClient Installed. I cannot find any installation of this product on the new system.  It's not in Start>Programs, it's not in the Uninstall area of the Control Panel, it's nowhere in my C: drive. What can I do to trigger the correct install?Windows 7 enterprise, SP1

Hi At the moment I use BGP over my VPNs as I have Verizons Private IP network using BGP.I have backup VPNs back into my main site to backup the Private IP with Manual switchover, we have (LTE for primary backup)should I be using a second, different weighted routing protocol?What Routing do you all use? Thanks 

Hi, We have Fortigate Version: FortiGate-300C v5.0,build0292,140801 (GA Patch 9)and FortiAnalyzer-VM, Version: v5.2.0-build0618 140826 (GA) We have problems with this logs:"User Report" ant all "Detailed User Report reports" Issue with User Report: We found that only Traffic summary tab and user name is different. Other tables is same for all 5 users. Is it some bug? Or it's ok with it? Issue with Detailed User Report reports - empty, we try all approaches from this post https://forum.fortinet.com/tm.aspx?m=116340except to change fortianalyzer version. Please help me to resolve this issues. Thank you 

Hello community I have been trying to setup my AC340U dongle in a 60D router with no success. The dongle is currently supported on the official list.  # diagnose sys modem detect Can not read modem device: timeout modem is attached. dialtone is not detected. I believe I have found the problem.. There is no dial tone to the dongle. If I try do dial to the modem this is what I get: modemd: run_state_machine state 6(stopped) modemd: modem state changed: 6(stopped) -> 0(uninit) modemd: redails:1 isp:0 dev:/dev/ttyusb0 tel:7875856666 modemd: run_state_machine state 0(uninit) modemd: modem state changed: 0(uninit) -> 1(inactive) modemd: Launch modem due to auto-dial. modemd: Begin dialing: redials left = 1 modemd: dev=/dev/ttyusb0 tel=7875856666 modemd: modem state changed: 1(inactive) -> 2(dialing) chat: abort on (BUSY) chat: abort on (NO DIAL TONE) chat: abort on (NO DIALTONE) chat: abort on (NO ANSWER) chat: abort on (ERROR) chat: send (atz^M) chat:

Hi, I am new to fortigate environment.I have configured the SSL-VPN & able to log-in to web-mode & can ping & use RDP etc thru web, but when i am connecting via client its not working & my internet connection also going down.  Any idea or understood my problem?

Hello, I have one problem, and I do not understand how to solve it:I have to create one policy (IPv4) with application control. This policy must be triggered by single application.For example: By this policy I would like to control YouTube traffic.  allow some AD group to visit youtube pages.Another rule would be do same for Facebook, for twitter, etc. how I can implement granular application control? I can allow, block, or monitor applications. but I would like to use one application - (for example YouTube family). Any ideas? May be I have to use completely different way?PS: FGT100D, with active contract. No explicit proxy. Update: forgot to mention: latest firmware for today, v5.2.2,build642 (GA) Just example, what I speaking about - application control. I do not like to check or monitor categories. I would like to allow youtube only, nothing more. [broken image deleted]

Hi all,I'm new in this forum and also with Fortigate. I know very well screenOs.I have to migrate some ScreenOs FW to Fortigate, and I've some problem with VPN.At a moment I try to test a VPN Interface mode between two Fortigate. In my case I need to terminate a VPN to a secondary IP of FGT-B.The tunnel goes UP, but when I tried to ping a PC on the other side on FGT-A the packet go throught the VPN, on FGT-B I get this error : id=20085 trace_id=106 func=init_ip_session_common line=4522 msg="allocate a new session-00026962" id=20085 trace_id=106 func=vf_ip4_route_input line=1596 msg="find a route: flags=00000000 gw-2.0.2.70 via port3" id=20085 trace_id=106 func=fw_forward_handler line=545 msg="Denied by forward policy check (policy 0)"The policy is present but I don't understand why this traffic don't match the policy. The configuration of FGT-A is :    edit "wan1"         set vdom "root"      &nbs

Hey guys. I have a firewall with TONS of tunnels of it. I know from experience with smaller boxes that the power of diag debug app ike -1 is fantastic. However, I know as soon as I run it on this box it's gonna just absolutely be insane due to the number of tunnels.  Can I filter down to the ones I want in some way? Edit - Totally might have just found my own answer - seems like diag vpn ike log-filter has what I'm after. Can anyone confirm?