Solved

Hi,I'm working on new Fnac 7.6 deployment.I need only visibility functions, in particular I need to associate user/host/ip address and see all in fortiview.It is necessary the persistent agent or I can retrieve the information in another manner ?Also I don't understand why in fortiview dashboard I can't see the ip address, only mac-address, but in adapter window I see the ip address resolved by mac-address.In inventory I set L2 polling and L3 polling on core switch.Thank you Vincenzzo 

when FGT is collecting tx/rx traffic for specific interface to draw graph, what is options used in this graph ? [i mean inside FG itself , collected logs not yet exported to FMG / or FAZ ]what is sampling rate for traffic , is it based on time , packets , etc ? [please provide reference]--then when its sent to FMG i see on fresh logs it can show up to 5 minutes distance , then if we explored old graph , distance is compressed to about 30 minutes [please provide reference]FortiGate FortiManager 

I have a situation where I have 4 unique subnets.192.168.0.0/24192.168.1.0/24192.168.2.0/24192.168.3.0/24 Currently, there are no Vlans defined on the switch, so they are all in VLAN 1.  A Cisco router is currently serving as a Gateway for this site and has the followinginterface GigabitEthernet0/0/0  ip address 192.168.0.1 255.255.255.0  ip address 192.168.1.1 255.255.255.0 secondary  ip address 192.168.2.1 255.255.255.0 secondary  ip address 192.168.3.1 255.255.255.0 secondary I would like to slip in a Fortigate Firewall to serve as the gateway device, but i need a way to service all of the subnets that are all residing in Vlan1 over a single ethernet cable.  I have tried to give the port a parent IP address, similar to Cisco, with secondary ip addresses...but i cant ping from the network to the respective secondary ip address and vice-versa.  The parent ip address works fine.  any ideas?  I have tried configuring the C

Hi, We want to use the "script feature" located in "login > configuration > scripts" to upload and run objects/rules instructions. When all goes well, script is "success", but when one command fails, part of hundred of lines, GUI returns only "script failure" without any log. Where could we find what has failed in the whole script ? Does this feature have any log ? Regards,

How can I achieve Multi-Site (Primary and Secondary)  HA Deployment with following 3 Supervisors without DB3 DB servers3 Keepers2 workerswith version 7.3.0 

Happy New Year,Couple questions  My goal is to create an alert based on the values in a particular value field, RequestTypethe possible values are :"oauth2:authorize" .   or   "login:login". if we find this last one we will create a rule to alert.My customer is sending logs for parsing by  Office365Parser-v1.2   they want to be alerted if the sample logs below Thank you,   Karl Henning  I have removed some stuff to anonymise   [OFFICE365_EVENT_DATA] = {"Actor":[{"ID":"2df6c5b4-66e0-456f-8028-92a389afe2cd","Type":0},{"ID":"stuff ........ClientIP":"2607:fea8:9367:a200:e0d9:d500:edea:22ce","CreationTime":"2024-09-25T13:21:21UTC","DeviceProperties":[{"Name":"OS","Value":"Windows10"},{"Name":"BrowserType","Value":"Chrome"},{"Name":"SessionId","Value":"c774a6fd-4dfc-43c2-9ee5-2f56c2bc2c49"}],"ErrorNumber":"0","ExtendedProperties":[{"Name":"ResultStatusDetail","Value":"Success"},{"Name":"UserAgent","Value":"M

Hello, Where can we find offline installers for FortiClient, please?  I.E. this version and all future versions. Often the process of the FortiClient installer connecting to the server and obtaining the files is the longest part of a job.  At least if we had an offline installer, we could anticipate how long the file would take to transfer or do it as a background process, etc.  My current install (update) to FortiClient on a remote laptop has taken half an hour to get to 15%. Thanks,Mark

We are trying to set up notifications (via automation stiches) of system configuration backups.  The automation stiches appear to support this as they have entries for the relevant log events (32142 and possibly 32145) but for whatever reason, our FortiGates are not recording the backup events in the event log.  The log setting for "Event logging" is set to "All." We can find no other place either in the GUI or CLI reference material that would indicate any other setting to enable the expected functionality. Does anyone have any insight into why the backup events are not being recorded in the event log?The models in question are 100F, 80F, 60F and firmware versions 7.6.0, 7.6.1, and 7.2.10.

We are currently running FortiClient for antivirus on our endpoints and this works well with FortiNAC Endpoint Compliance. The issue we are running into is testing a new antivirus that is not listed on the Antivirus list within FortiNAC. Is there a work around to use an unlisted Antivirus for Endpoint Compliance within FortiNAC v7.2.5?

Is there a way either on the device or on the support pages to see the history of Forti OS updates applied to the device?

Hi Community, In FortiAnalyzer: is it possible to generate a report that shows me license information from for example FortiGate using a custom dataset? Info like "about to expire licenses" from all FortiGate devices. Also things like you can get from "diagnose autoupdate ver", for example "Last Updated": <snip>Flow-based Virus Definitions---------Version: 93.00577 signedContract Expiry Date: Sun Dec 28 2025Last Updated using scheduled update on Mon Jan 27 17:12:27 2025Last Update Attempt: Mon Jan 27 17:42:10 2025Result: No Updates<snip>

Hello, I recently installed a second WAN on my FortiGate 40F. I've been facing an issue I'm not able to resolve and looking for some help. I am a beginner though, so I'll try my best to explain my goal clearly and current Goal:- My wan1 has a bunch of static IPs, while wan2 doesn't have any. - I would like to access my file server via a static IP from wan1 from the internet (only wan1 has static IPs)- I would like the application to only upload traffic via wan2 because it is 25x faster.So, it should listen on wan1, but actually use wan2 only for data transmission.  Current Setup:- Configured SD-WAN and added both members. WAN2 has a higher priority, and in general it is being used most of the time, which is good for me. - working fine- Created VIP for my server (external 37.37.37.37, internal 192.168.5.111) - working fine My Policies: - SD-WAN to LAN (source all, destination VIP)- LAN to SD-WAN (source all, destination all)  F

Hello, I understand that even if a a Telco Internet circuit supports a standard MTU of 1500 and fragmentation is either not supported or reliable, that this is irrelevant to the fragmentation that may take place on traffic passing via a Fortigate IPSEC tunnel across that Internet circuit i.e. the two concepts are separate.So, you could have a telco Internet circuit with 1500 MTU and no fragmentation support, but fragmentation can still work WITHIN the Fortigate established IPSEC tunnel.Am I correct in this thinking ?Thank you kindly. 

I need to create some kind of notifications that an email with specific words in subject or in body was sent to any email address. I managed to achieve it with Archive account. I've created an Archive account which is forwarding email to another email address and I've created a policy that is archiving emails based on Subject and Body pattern. It works fine if the word in subject or body is equal to the word I've entered in pattern on policy. For example I've created Policy with Policy Type Subject and in Pattern I've enter word: bomb The policy works fine for example for a subject like this: I've sent a bomb to you. Email is properly forwarded to email address I've entered in Archive account. However the policy is not working for subject like this: I've sent few bombs to you. I've tried entering *bomb* in pattern but it's not working. Is it possible to use WILDCARDS in this policy patterns or REGEXP expresions? Or is there any other way to

Hello, I have a FortiGate 100F, and my license will expire on February 3, 2025. Is it possible to add a trial license for temporary use? #fortinet #license #fortigate #100f #trial.

The USB modem, which successfully establishes communication on FortiGate 50E and 60E, is not recognized on FortiGate 60F.    FortiGate 50E / OS 6.2.15 .... OK    FortiGate 60E / OS 7.2.5 .... OK    FortiGate 60F / OS 7.2.5 .... NG!On 60F, "Modem failed to open" is repeatedly logged in the system log.Although 60E and 60F have the same OS, only 60F does not recognize the modem. I am confused! #Restored to factory settings and applied only the following configurat#This modem mode switching is not necessary.config system 3g-modem customedit 1    set vendor "SORACOM"    set model "SC-QGLC4-C1"    set vendor-id 2c7c    set product-id 0125    nextendconfig system modem    set status enable    set auto-dial enable    set wireless-port 3    set phone1 "*99#"    set username1 "sora"    set passwd1 ENC xxxxx    set extra-init1 "AT+CGDCONT=1,\"I

Hi, So our fortigate cluster restarted last night. We got the following messages over SNMP :FortiGate: Device has been replaced (new serial number received)FortiGate: System name has changed (new name: xxx-fw1-n1.xxx.net)FortiGate: xxx-fw1 has been restarted (uptime < 10m) This also meant one of our VPN tunnels went down and which generated an alarm. What might have happened here?

Hi, I am trying to configure LDAP for user authentication against AD. This works fine for users that are directly member of the group that is mentioned in the User Group configuration. The design, however, is that a user is member of a Role and the Role is member of the group. When I have this configured in AD it does not work anymore. When I make the user a direct member of the group again it works. How to get this working? Regards, Wim

Hello, I'm configuring ldap server on a fortigate v 7.6.x.The ldap server is behind IPSec VPN. The clients on the LAN already contact the server in question as they have made domain joins and use that ip as the DNS of their network card.When I go to configure the ldap bind to ‘ip_LDAPServer’ on port 389 this fails. Do you have any suggestions? Thanks fort the supportBR

Hello everyone, While upgrading FortiClients on Debian-based machines, I encountered a problem that I would like to share with you here to find possible solutions or workarounds.In the official Fortinet documentation for FortiClient version 7.4 for Linux-based systems (https://docs.fortinet.com/document/forticlient/7.4.2/linux-release-notes/213138/install-forticlient-linux-from-repo-fortinet-com), the following command is given to add the GPG key for installation on Debian-based systems:wget -O - https://repo.fortinet.com/repo/forticlient/7.4/debian/DEB-GPG-KEY | gpg --dearmor | sudo tee /usr/share/keyrings/repo.fortinet.com.gpgWhen execute the following error is shown:Connection established to repo.fortinet.com (repo.fortinet.com)|208.91.114.61|:443 ... connected.HTTP request sent, waiting for response ... 404 Not Found On Fortinet's official download page for version 7.4 (https://www.fortinet.com/support/product-downloads/linux ), Debian-based distributions are not sho

Greetings, we're currently trying to build our new IPsec VPN Config coming from SSL-VPN.While reading the XML Reference Guide for configuring IPsec i stumbled upon an Inconsistency on "implied_SPDO" The "<implied_SPDO>" and the "<implied_SPDO_timeout>" literally contradict each other.For example on: https://docs.fortinet.com/document/forticlient/7.4.2/xml-reference-guide/96295 (however its the same on all Versions that i looked at) implied_SPDO states that Internettraffic is allowed when its set to 1.implied_SPDO_timeout however states  that "FortiClient blocks all outbound non-IKE packets when <implied_SPDO> is set to 1" and "Thus, setting <implied_SPDO> to 1 may have the side effect of blocking access to the captive portal, which in turn blocks access to the IPsec VPN server" Which makes no sense, according to various KB Articles here this looks like that non-IKE packets are allowed whe

Hi, in case any banking customer located in particular country and while initializing Fortisase portal we select same country pop only. Can we select additional pop location later on as per the requirement ?Also what to do if there is no logging pop location within the country. As customer belongs to banking sector will not allow to select logging to another country's pop.Pleas guide.. 

Hello, I have some old Fortigate equipment that need the latest version of the firmware, and I just noticed that Fortinet does not provide it until I have a support contract. Is this true? and I need to purchase the contract to download it for my old equipment?

HiI added a personal VPN connection to my FortiClient EMS. It connects to the VPN and everything looks ok. But when i do a route print it hasnt addad any interface, gateway or routes for the VPN. The corprate VPN works fine though.What can the problem be?If I do the exact same with another computer the personal VPN works fine, so it seems that it has something to do with my computer.Both computers have fresh updated Windows 11 on the same network. I have tried different versions of the FortiClient, both non-EMS clients and versions from 7.0.1 to the newest. Turned of the firewall. Nothing helps.It looks like the FortiClient isnt allowed to add the routes for my personal VPN, but only on this one PC?Any help or suggestions are appreciated. /Anders

May I create two different ssl-vpn portals with two different ports? For examples 10443 and 11443.