Solved

After we Enable password expiry and define "Maximum password age", is there a way we can obtain local user password expiration time information? Tks

Hi we have 2 environments DEV & PROD FortiSOAR. Requirements is that if playbook is successfully in blocking IP on FortiGate then analyst can promote that playbook to Prod FortiSOAR is there a way. Thanks

Hello! We are facing a problem with disconnected FortiAP.After FortiGate upgrade to version v 7.2.2 b.1255 our FortiAP seems like it's disconnected.   On Edit Managed AP panel there is information that this AP is connected via Ethernet and it has IP address assigned - this AP is resolvable via this address and we can login into it.Clients can connect to networks availble on this AP but we still see this AP as disconnected. What can we do to see this AP as Online without resetting it to fabric state?   

Hello, I need to set up VDOMs on an existing installation. I have enabled VDOMs on the Fortigate, so I can see the root VDOM. I have created a VDOM1, and I want to completely move the contents of the root VDOM to VDOM1 (the VLANs, the rules associated with the VLANs, etc.). How can I do this simply and cleanly? I also have FortiManager available. In the future, I will need to create other VDOMs, which is why I want to move the contents from root to VDOM1. Thank you for your help!

We are exploring whether we can integrate our Fortigate FG401E with TrendMicro using the security fabric connector.But i don't see it in my FG401E using FortiOS 7.2.8.is this only for certain FG firewall ?? TrendMicro Integration with Fortigate FirewallIntegrating 3rd-party services using the Trend Micro Vision One Service Gateway

i will be upgrading my fortigate 401E to 7.2.8.do i need to upgrade the FSSO agent as well?current FSSO agent is 5.0.0312. i notice that there is version 5.0.0314.

Hi!I´m new to fortigate and I´ve spent some time but did not find a solution or hints in the forum on my question: I have configured a DNS-server on the local network.I want to migrate the windows hosts-file entries to the DNS-Server. in the hosts file I find entries likemyserver 192.168.1.55 how can I add this to the fortigate DNS database?the computers are not in any domain. I have not configured a domain.I just need the plain computername to be resolved to the local IP-Address.Is this possible? Many thanks

Azure's "VWAN" integrates with a number of security partners, Fortinet are one of them. Fortinet offer SD-WAN as a managed application (Network Virtual Appliance) that deploys into an Azure VWAN and talks BGP with the VWAN hub allowing for exchange of routes between your on-prem, azure VNets and SD-WAN branch locations. The NVAs (a pair of VMs are deployed) are managed by Fortimanager. To access the NVAs shell, you must connect using the Fortimanager Web UI. There's no other way to interact with the SD-WAN NVAs...Along with connecting to the NVA's shell, it's also possible to reboot them and shut them down... And here's my problem....I shut one of the SD-WAN NVAs down while testing/troubleshooting but I cannot find a way to restart it!  I cannot find a "restart" button in Azure for the SD-WAN managed application and when i tried using "Start-AzVM"  PowerShell command i get error similar to... "Error: The client 'user(at)company.com' with object id 'xxx-xxx-xxx-xxx' has permis

Hello, there is exist a way to manage fac from fmg? I didn't find the option to check fmfg under the fac interface as for the fortigates, when I try to add ip from the fmg via the standard adoms it gives me a network probe error even though the two devices ping correctly. There is exist a guide about it? BR, G

Hello dear Fortinet Community! I am investigating a curious situation in a customers enviroment. There is a continuous problem in 2 different VLANS (the first one is on an AP and the other on a wired VLAN)The problem occurring is that the client PC suddenly drops packets. I cant find anything unusual in the FGT error log history from the client IP both in the wireless VLAN or the wired one.If the user hotspots from his mobile everything works fine.The problem was first noticed in Video calls where the user would suddenly loose connectivity.I tried pinging from the users pc , another pc on the same wired VLAN and from a different pc in the wireless one towards 8.8.8.8.I can see packet losses but not at the same time and not a steady interval. It can happen from an hour to 10 minutes to two and half hours. Again i say it doesnt happens at all the different PCs at the same time.To add the wired VLAN policy has only web flow based module, AV flow based module, DNS module and

Hello everyone, While I was reading about IPS and how it is being used when in flow based for various security features, such as Antivirus, Web Filtering any many more. What I was intrigued about is the behavior when it is in proxy mode and I found a thread about it, but when I click on it all I see is "This Content was Archived". I can read the first two sentences of the thread from the google search, but it ends right when the person is explaining what happens in proxy based.  Here's the link: https://community.fortinet.com/t5/contentarchivals/contentarchivedpage/message-uid/72266  

Hello, everyone!I hope you are all doing great. Our company's Fortigate license has FortiCare Support included. The company through which we bought the license have been giving us poor support. I have been contacting them for weeks, but they have only answered my phone calls and messages a few times. They didn't contact me back except one time or so. What rights do I have against this company? It's a Fortinet partner, and yet we don't get proper support.They were better in the first few months, but they slowly started changing. Best regards, #fortigate #forticare

Hi,I´m tring to integrate my Fortigates with an script.My script can add any already created address in an specific group, but I can´t find a way to remove only one address, all I can use is add just an address or change all adresses all at once. Any help would be appraciented.

Hi, I get errors when I want to add a device to Fortimanager.The devices are on the same network and have icmp access to each other. All outputs are as follows. Why am I getting errors, can you help me?  Manager # Request [dvm/cmd:dvm/cmd/discover/device ...:5825:2]: { "client": "dvm\/cmd:dvm\/cmd\/discover\/device ...:5825", "id": 2, "method": "exec", "params": [{ "data": { "host": "192.168.1.17", "passwd": "******", "usr": "admin"}, "target start": 1, "url": "probe\/device"}], "root": "deployment", "session": -1} Chkperm Response [dvm/cmd:dvm/cmd/discover/device ...:5825:2]: { "id": 2, "result": [{ "status": { "code": 0, "message": "OK"}, "url": "probe\/device"}], "session": -1} start_dmsvc_probe_device,788: dev_oid=0, host=192.168.1.17, flags=0x0 __enter_state,440: dev_oid=0, start check_reachable Start probe_dev.check_reachable ... __on_state,446: dev_oid=0, check_reachable, done, events=16 r=0 __enter_state,440: dev_oid=0, start start_probe_session Request [dmserve

Hello fellows, I have a problem with the DNS resolution of www.epicgames.com in particular. I have not yet noticed any other FQDNs. The following configuration at my home:Fortigate assigns an IP address to all LAN clients and is the local resolver and gateway, this is set via DHCP.My private Fortigate 61F (FortiOS 7.2.8) is (sometimes) not able to resolve this FQDN. Accordingly, the browser reports back that the domain could not be resolved (DNS_PROBE_FINISHED_NXDOMAIN).Same result when I try it with nslookup (** server can't find www.epicgames.com: SERVFAIL)It also does not work on the Fortigate itself (execute ping www.epicgames.com - Unable to resolve hostname.).However, if I use nslookup to query the server 9.9.9.9, for example, it works fine. It also works with the server 96.45.46.46 from Fortinet (both upstream resolvers). There are no security profiles set in the rules. What should I do, how can I find out what the problem is?After restarting the FortiGate, i

Hello, I'm testing a configuration using aggregate dial-up IPsec but I'm having trouble getting it to work. The thing is that in the IPsec Tunnels configuration the aggregate "Test" shows up in green, but when I create the static route in Network -> Static Routes it shows the aggregate "Test" as down in red. Did I miss something in the configuration that most be done to work? If I change the VPNs to IPsec site to site not dialup the aggerate shows up (green) in static routes. Can't use SDWAN because I used up all 512 members already.Fortigates have Firmware 7.0.15  Thanks for any help you can provide!

Hello everyone,I have a problem with the DHCP service no longer working after reconfiguring fortinac using the configuration wizard.I tried to restart it via cli but without success.Can you help me?

Hi, some months ago we changed from 100D to 100F HA (7.4.3). Sofar, no problem at all ;) but it happend like 3 times that our Zabbix reports for some time critical CPU utilisation (I think it marks critical if it is some min >75%). Than I log in to the FG100 and in the dashboard I see like 2-3% of usage in the last 6 hours.  We had the same Zabbix with the old FG100D and never got this message. Anybody any idea? Is this data real or a failure in the syslog? Thanks

I'm looking to see if there is a way on a FortiSwitch (version 7.4.2) to view the current rx and tx optical power level for the SFP module.We are having some unusual issues and am trying to figure out if I have a bad fiber or possible bad optic

HI there,i am here to know that which forigate update is more stable and have less issues regarding preformance.

Hello. I am quite new.I used Forticlient VPN only with a Centos 8 box with no problems.Yesterday I upgrade my box to Centos 9 and reinstall  then Forticlien VPN from the this rpm packagehttps://www.fortinet.com/support/product-downloads/forticlientas I did on my Centos 8.Unfortunately, although I have exact the same  configuration as I had on my Centos8, now I can not connect to VPN.Is there something I should concerned on Centos 9? Thank you in advance.

Hi, I will install fortisiem for the customer, but when I download the package from the firmware download section, it shows 6 hours,my internet speed is 700 mbps tufin installation file 16gb tar in 20 min downloaded fortisiem 6gb

 Gentleman,I need support, show below that port 2601 on server that is map on loopback 10.2.202.10 is getting reset, but going direct to server port is open.  Need some help why going to loopback is resetting. 

Good day Fortinet Family, Is there a way to achieve this? I see steps  Profile -> Sessions -> inbound session -> lists -> Disallow recipients on this list Is this the only section or is there another/best alternative? Your assistance/direction/steps would be greatly appreciated. Regards,NeoRant  

I made some configurations,I created new user groups that I pulled from the ldap serverI created radius client and created policy but I get the error in the following log is it related to eap# Executing group from file /usr/etc/raddb/sites-enabled/default2024-06-04T12:33:46.061923+03:00 FortiAuthenticator radiusd[6259]: (4) eap: Found authclient from preloaded authclients list for 10.140.140.1: Forti_Radius_Besiktas (10.140.140.1)2024-06-04T12:33:46.063080+03:00 FortiAuthenticator radiusd[6259]: (4) eap: WARNING: No authpolicy for authclient 2 with authtype eap-tls2024-06-04T12:33:46.063679+03:00 FortiAuthenticator radiusd[6259]: (4) eap: Found authpolicy 'WiFi_Policies' for client '10.140.140.1'2024-06-04T12:33:46.063710+03:00 FortiAuthenticator radiusd[6259]: (4) # Executing group from file /usr/etc/raddb/sites-enabled/default2024-06-04T12:33:46.063738+03:00 FortiAuthenticator radiusd[6259]: (4) facauth: Updated auth log 'elif.sert' for attempt from 10.140.140.1: 802.1x authenticatio