Solved

Hello everyone!I have some problem with my Fortinet 80 C, it doesn't boot after firmware update. When I restarting it only "status" led diode blinking on green and after few second all internal ports blinking one second and status led changing color on red and this is happening over and over again...  I read i should try restore firmware image by tftp server, but another problem is I cannot connect to cli interface now, I get the message "device is used by another program" or something like that (I guess because it is starting up...). Connection options are correct (9600, 8, 1, none, none), because before I joined up.Is there any way to solve this problem and recover the firmware? I will be grateful.   

I recently helped a customer go from a completely flat network into a segmented network.  They only have one DNS server which sits on their server network.  I'm finding that over half of my sessions are related to DNS queries coming from clients on other networks trying to get to the server network.   Does it make more sense for me to run a DNS server on the firewall and forward DNS queries or should I continue to let DNS traffic traverse the firewall? I'm running a 300c on 5.0.7 and averaging around 15k sessions during peak usage.  In the current setup it often peaks out the CPU but memory stays around 40%.  

How to classify and mark packet on fortigate firewall.. ?? 

Hi there,I have Fortigate 310B firewall running but the Antivirus is listed as expired as per below. I am having difficulty in uploading the image. So i am going to illustrate how it looks like here : Fortiguard Subscription Services Antivirus        Expired [renew]- AV Definitions 14.00000 (Updated 2011-08-24 via Manual Update) [update]- AV Engine  4.00392 (Updated 2012-02-09 via Manual Update) 1) What does this actually mean? I believe the antivirus should be updated since Fortigate is running on it's own Operating system FortiOS. 2) Does the antivirus definition update require a separate license to run? As this was the reason I got that the license purchased was for firewall feature only, so I would like to verify if there is such thing. 3) If an antivirus update is to be performed, when is the best time to implement the update? I believe it should have some impact on network performances and speed so I reckon it shoul

Hello ,I have a question. I have a running IPSec Between 2 offices ( FG's) Site Mexico - 10.1.10.0/24 Site Ontario - 192.168.100.0/24 Now I need to add a new VLAN in Ontario L3 Switch - 10.1.100.0/24 , And I need to use this VLAN also for the IPSec . How do I achieve? thanks in advance.Nihas

Hi all, I thought I would just share a recent experience we had with our FortiGate 100D Cluster (Active-Active), Version 5.2.1 Build 618. I had created and applied a Web Filter Profile (let's call it Profile No1) to a particular group of users. I then cloned this Web Filter Profile, made a few changes to the cloned profile (imaginatively named Profile No2) and applied it to a second group of users.My reason for two separate Web Filter Profiles was I wanted to impose slightly different Static URL Filters to each profile. However, I noticed when I made a change to the Static URL Filter in either Web Filter Profile it immediately appeared in the other profile (wether I wanted it to or not). This had me confused as I imagined that the Web Filter Profiles were completely separate from each other. I dug around in the configuration and found that in the config webfilter urlfilter section, a urlfilter called 'DefaultWebFilter' had been created. I also noticed that in the co

Hello, After updating firmware 5.0.8 to 5.0.9, unable to retrieve FortiAnalyzer with Fortigate (fortiOS 5.0.9). Please help.

I've setup a new DoS Event handler on my FortiAnalyzer (IPS attack). Rather than change the DoS thresholds on the FortiManager DoS policy to start generating notifications by email and SMS is there anyway you can test directly from the FortiAnalyzer to see if email and SMS work?

hi fellas, im out of direction, how to add custom signatures? im running on fortios 5.2.1 and I want add signature thats block Psiphon3.current version cant block the said application.  Regards,

Hi all,I configured Web filter profile to use FortiGuard category. Everything was fine, but next day Fortigate block all web pages and display this information (in attachement). I hear that if Fortigate lost connection with FortiGuard, by default he is blocking all pages in policy where was this webfilter profile. Do you know is this true? If yes, is there any way to override this? I read about override in Web Filter, but it's not what I am looking for, I mean about some dynamic override which will be apply when the Fortigate lost connection with Forti Guard.

Hello, a short time ago I changed to NAT mode and now I want to connect with SSL VPN from everywhere to my Network.I configured everything and entered the CORRECT username and password in the VPN client on my notebook. I also addet my vpn user to a group which hast full SSL VPN Access. But everytime I connect it says: Can´t login username or password might be wrong (-12)Has anyone a idea why this isn´t working?

Sorry to make my first post a question, I used to be registered on the old forum some time back but haven't used this new one. I've done a little search but can't see anything. We have some old 1000As and they make a good test environment for FortiOS 4, which most of our estate runs. Just yesterday I updated to 4.0MR3 patch 18 on one of these and afterwards lost connectivity to it. It would seem that two of the ports have stopped working. Port 1 as far as the device is concerned now appears on physical port 5, port 2 physical port 6. Ports 7-10 are as per normal and ports 3 & 4 seem to have stopped working completely. Prior to the update this was a 100% functional device. Doing a 'diagnose hardware lspci' shows only eight network devices, not ten like our other 1000A. Completely wiping the system and reinstalling from TFTP was done, mostly as a last guess and it didn't help. This is really weird, any ideas? I'm unconvinced it is a hardware fault as ports 1

I've created config file to automate signatures download. I can't find in documentation which port numer is used to comunicate with FortiManager (bold one below)?  <update>             <use_custom_server>1</use_custom_server>             <server>10.0.10.123</server>             <port>8890</port>             <timeout>60</timeout>             <failoverport>443</failoverport>             <fail_over_to_fdn>0</fail_over_to_fdn>             <update_action>notify_only</update_action>      &nb

Hi, When I need to change the application sensor, IPS sensor or web filter associated with a policy I need to drag the policy line right to the bottom of the ruleset above the implicit deny, change the UTM sensor or policy, then move back to the correct position. If I dont follow this procedure then the policy loses all it's L7 inspection sensors. Is this a bug ? We're running 5.0.7 PJ

Hi ,we are using a Fgt 1000c ,our company renew the ssl cert. to Globalsing OrganizationSSL , but when the certificate file adding to fgt unitonly Remote and CA Certificate tabs.It couldn't accept to local Certificate . thank you

I've written a custom dataset SQL query that produces me a count of how much traffic (GB) goes In/Out through our Internet link (port 16 on our FG200B) per day.  It works great.Then I created two Charts based off this Dataset:  one is a Table format (lists the data values tabular format); the other is a Bar Graph.Then I created a Report utilising the Charts ... and here is where it has gone pear-shaped:If I embed the tabular data Chart by itself into the Report, it works.If I embed the bar graph Chart by itself into the Report, it works.If I embed BOTH of the charts into the Report, only ONE of them is displayed; the other has "No data".I had expected that if I created a Dataset, then multiple Charts from that dataset, the FL100C would be smart enough to run the SQL query once, then reuse the results multiple times to drive the charts ... but it seems I am mistaken.I don't really want to needlessly duplicate datasets, just so I can use that data multiple times in a report.Sug

Hi! I've found the information about VLAN interfaces in "The FortiGate CookBook" brochure page 75.http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=Fortigate-Cookbook-40-mr3Part2pages75-159pdf&sliceId=&docTypeID=DT_PRODUCTDOCUMENTATION_1_1&dialogID=65331582&stateId=0 0 65329902 But why I can not to add a new interface VLAN-type in Fortinet 40C? There is not such menu in "System > Network > Interface". 

Hi all,I want to create two groups which will be authenticated with RADIUS server with different level of accesibility to the network.I know that if I creating authentication with LDAP server I can create two groups and associated them with different groups od LDAP server by specifying indyvidual CN.Could you tell me, if I could to this the same with RADIUS? If yes, how can I do this?

Demo'ing a 100d recorder and a bunch of cams and cannot find any support.  All the equipment is demo equipment so I cannot create a ticket to get help. 

A simple question I hope, how do I disable Fortiguard completely (globally) from the command line.I would like to turn every Fortiguard function off. FW (global) # config system fortiguard FW (fortiguard) # set port                          Port used to communicate with the FortiGuard servers. service-account-id            Service account ID. load-balance-servers          Number of servers to alternate between as first FortiGuard option. antispam-force-off            Enable/disable forcibly disable the service. antispam-cache                Enable/disable FortiGuard antispam cache. antispam-cache-ttl     &n

I have just received the redemption certificate for a recent FortiToken Mobile purchase and see that the first requirement is to make sure that the FortiGate is connected to the internet.  Our units are buried into process control networks that do not (nor should) have connections to the internet.  Is there another method to activate the tokens? --Ron

Please find the final version of the FGT 5.2.1 Firewall Policies module.  Comment and feedback always welcome. https://www.brainshark.com/fortinet/FGT_5-2-1_Firewall_Policies Mike

Is it mandatory that I chose WAN interface for Outside segment, DMZ interface for DMZ segment. Is there any hard coded settings such as security levels for these interfaces?

Hey guys, got a little problem. I use my Fortigate now in NAT mode, and I want to go to the Internet from the LAN interface.In the DNS settings I entered 10.0.0.138 (which is my DSL modem) In DHCP I configured 10.0.1.1 as Gateway and range 10.0.1.2-.99. The lan interface has the ip 10.0.1.1 and my Interface where I connectet the modem has 10.0.0.99. I createt a policy: source: lan adress: all destiantion: wan adress: all protocoll: any NAT: onBut I cant connect to the Internet. I can only connect to 10.0.0.138. Do I use the wrong DNS server or has anyone a idea whats wrong? -thanks

Hi, I need to remove uneeded configuration from my FG 1000c for audit purposes. We do not use the wireless controller features so I would like to remove the two section's below. I have tried to remove but get the error's at the end of this post - i have searched the config and the mesh.root interface only seems to be referenced in two places...(the two below) How can I delete these? config wireless-controller vap edit "mesh.root" set vdom "root" set mesh-backhaul enable set ssid "fortinet.mesh.root" set alias "m" set passphrase XYZ****** next config system interfaceedit "mesh.root" set vdom "root" set type vap-switchset snmp-index 31  FG01 (vap) # delete mesh.test Can not delete a static table entry Command fail. Return code -61  FG01 (interface) # delete mesh.test Can not delete a static table entry Command fail. Return code -61