Solved

Hi, I have the below setup on an ESXi host, Router VM is a Fortigate Firewall VM. Traffic from VM1 can ping VM2 but not the other way around, not sure what is missing.   Intergfaces configuration  Policies Configuration  vSwitch 1G is connected to vmnic0 and vSwitch 10G is connected to vmnic1. Any help as to what is missing ? Thank You

Hi all,can you clarify the difference between the Report & Report bundlesthanks, on advancemuhammed#Reports#Reports Bundles

Fortigate not showing any logs in Events >> HA Events.Checked the same in FAZ and there also it is not showing any log for HA.Both device are showing status Synchronized in HA section.Trying to check ha history "diagnose sys ha history " but that is also not showing any output.Please guide..  

I have noticed if you set an IP-Range for the client configuration. It will then give the client the first IP-Address that is useable, and then set the Gateway to the second IP-Address of the range. Can you set the gateway manually?

AnyConnect allowed us to prepopulate the username field and still require the user to enter a password when they are ready to connect to VPN. With FortiEMS, I found that if we enable the "Allow personal VPN" option, you then have the option to save login and provide a username to a new connection you setup in FortiClient. However, the connection we created in EMS will have everything grayed out and not allow to save the username. I tried enabling the "Show VPN Before Login" and "Use Windows Credentials" option, but you are forced to either use VPN prior to login or not. If you choose not to, then it does not cache your credentials when you are ready to connect. Hopefully that makes sense. Does anyone know if there is a way to prepopulate the username field or store it without the end user having to setup their own VPN connections?

Suddenly last week I lost logs from one of our firewalls (200F) in the Fortinet Cloud views. I can view the logs stored on local memory and the cloud logs of other firewalls in the security fabric in FortiView still, and the log settings show data still being uploaded to Fortinet Cloud. We're on a free plan, so I'm not sure what my options are for verifying on the cloud side that the logs are there. I have a ticket in, but support has been less than active on it. So far my only instructions have been to restart the logging service with fnsysctl killall miglogdwhich hasn't had any visible effect.

Hi, I have query on how licensing works when we configured Fortianalyzer in analyzer and collector mode.  If we have one layer of collector which collects logs and does Archive storage and another layer of Fortianalyzer in analyzer mode which receives logs from collector and then does indexing and stores Analytic logs. In this scenario, what is the perpetual license model to select. If my expected data ingestion is 25GB/day then should I need to buy 25GB/day perpetual license for both collector mode and analyzer mode FA or getting it in one either collector mode or analyzer mode is fine?? Can you please clarify. There is no public Fortinet documentation available on this.. RegardsRaja

Hello,I'm trying to create a MAC address-based policy using the VPN tunnel interface as the incoming interface, but it's not working and it authorizes all MAC addresses of the VPN users. Do I need a license for this?Regards, 

Hello team!!! I hope it goes well for you!We have 2 different "trunk" interfaces (With different VLANs on each one).For example:* VLANs 10, 20 and 30 on port1* VLANs 40, 50 and 60 on port2Now, we need to add the VLAN 100 in both trunks interfacesBecause, for example, we need to access from something in VLAN 100 connected to port1 to something on VLAN 100, connected to port2.We have a managed switch directly connected to port1 and a different managed switch connected to port2 I thought to create the first VLAN Switch (Other 2 are not VLAN switches, just interfaces with VLANs) but I do not believe I will be able to use current port 1 and port 2 on it So, with my moderate knowledge, I think the following 2 options:* Create a VLAN switch for different ports (example: port3 and port4), with VLAN 100, and connect both to each managed switch in a different port, with VLAN 100 as tagged* Create a virtual switch (without VLANs) for different ports (example: port3 and port4),

Hi @ all, we have a Customer running FortiClients on their Endpoints and using an EMS-Server (v7.2.4 build 0983),in the GUI section, Administration > Log Viewer, i can only see EMS-Server generated Events,LDAP queries, admin logon Events, Settings updated etc., but no "on Endpoint x generated FCT Logs", like Security Events, FCT Web Filter block events as example. Correct me please if i wanna see this events "FCT WebFilter" i have to go GUI: Endpoints > all Endpoints > search for Endpoint which got issues > execute >Action request FortiClient Logs, then search in the fclog.dat for the related log? I was wondering because in the GUI Section Quarantine Managment > Files, in this Tab are Files and Endpoint listed, so the FortiClient forward this information via FortiTelemetry to the EMS-Server, triggered by scheduled AV-Scan or may on-prem Scan.So is there the possibility to see this FCT-WF "Block" Events without the need of this Steps: GUI: Endpoints

 Hi, I'm trying to import FortiManager (Xen Server fork) appliance on my XCPNG with XOA. Appliance imported successfully, but when I start the VM, I have a Kernel Panic. I tried to another host, and another storage, no luck... I also tried a older version of FortiManager VM without success Do you know about this problem ?

Hi Community, I am testing fortiAI, installed and configured it using openAI api key, but receiving this error " I'm sorry, it seems like there was an issue generating a response. Please try your request again, or refer to the advisor troubleshooting documentation for assistance. "in response form AI.Do someone has any idea ? I am using the free Open AI API key. 

Hi, we have some issues with FortiAPs after upgrading to 7.4.3 and from the support we got like just wait until 7.4.4 to solve this problem but nobody has given us an official release date? I mean like if it takes until May, maybe we have to plan to do some downgrades. Thanks!

FortiSOAR Hi Experts,The idea is to create a shift handover using FortiSOAR. Lets say, in current shift 05 alerts triggered, out of those, 3 were closed successfully, 02 were in progress/investigating. Lest say, during the investigation of those 2 alerts, shift time is over. The current shift SOC analyst would initiate the shift handover and would handover the "in progress/investigating" alerts to next shift. Need to create the above scenario in FortiSOAR. Please help! I shall be extremely grateful. Regards,MFaruqi 

Hi. Do anyone knows how to check the FortiCare support period(expiration date) in CLI ? In the GUI, we can show it in the following menu, but there looks no commands for CLI. System->FortiGuard->FortiCare Support-Hardware Version : Return to factory - expires on XXXX/XX/XX-Enhanced Support: 8x5 support - expires on XXXX/XX/XX Thanks,Tomioka

Hello,I'm hoping to find any information on the type of connector used on the end of the AC/DC power supply provided with these firewalls.We have our own fully redundant DC power plant at some sites that we'd like to connect directly to 12VDC without the need for the AC adapter - doesnt make sense for us to go from AC->RedundantDC->Inverter->AC-adapter->FG60F. We'd like to source our own part so that we can go AC->RedundantDC->12V->FG60F

Hi, I currently have a Fortigate with a /29 public IP pool on my WAN interface. I have requested more IP addresses from my ISP. I need some help to determine the best configuration scenario for an ongoing installation. Here are the details provided by our supplier: Direct Routing: The supplier suggests that the IP packs be directly routed to our equipment. For this, I need to provide them with the IP addresses of our equipment for our three sites.Secondary Configuration: Another option is to configure the IP packs as secondary on the LAN of their routers.I would like to know:Which option is better in terms of performance and security for our Fortigate equipment?Are there any specific implications (such as NAT configuration, routing, etc.) that I should consider for each option?Any experiences or recommendations on managing this type of configuration would also be highly appreciated.Thank you in advance for your advice and feedback!

Good morning friends, based on your experience:Why is it important to not have all "ALL" ports enabled in fortigate firewall policies? I greatly appreciate your comments.

Hi guys, Fortimail is POWERFUL. Been getting some calls now from staff, that some of their mails are being blocked, required for work. Fortimail is working great i tell you, spam is being caught well, anything looks off, it is snatched for quarantined or blocked. I used an antispam inbound profile that is not so robust, but it seems like it is STILL kinda robust lol. However, i would like to create some exceptions for certain email domains so these mails can pass via. Some mails are not even being quarantined; they are just blocked totally. How can i set these exceptions and where specifically?  

Hello, We need to migrate an existing FWB-VM from ESXi 6.5 to7.0. Do you know if this hypervisor version is supported? At https://docs.fortinet.com/document/fortiweb-private-cloud/latest/fortiweb-vm-on-vmware-esxi/670068/system-requirements it seems that FWB-VM supports up to 6.7. Thanks

Hello! Need help with reset admin password. Previous administrator disable sim-card and leave to another country.read topic:Resetting a lost admin password - Fortinet Communitybut version of firmware another or maintainer is disable.If my fortinet start, i'ill see in console menu: FortiGate-81F (17:40-07.27.2021)Ver:05000025Serial number: FGT81FT*********CPU: 1200MHzTotal RAM: 4 GBInitializing boot device...Initializing MAC... NP6XLITE#0Please wait for OS to boot, or press any key to display configuration menu.[C]: Configure TFTP parameters.[R]: Review TFTP parameters.[T]: Initiate TFTP firmware transfer.[F]: Format boot device.[I]: System information.[B]: Boot with backup firmware and set as default.[Q]: Quit menu and continue to boot.[H]: Display this list of options. Then if i choose "Q" system starting full and login maintainer and pass "bcpbFGT81FT*********" not working. How i can reset password without hard reset config? 

Hi,Please can you help to integrate checkpoint firewall to my FortiSIEM.I have logs in my siem but it's unknown_EventType .How can I parse thé logs?

Started getting these network connection errors every hour on EMS.  Anyone experience?  Can ping 173.243.143.6.   [04-15 00:28:13][ ERROR]: Network connection error [04-15 01:28:27][ ERROR]: Network connection error [04-15 02:28:20][ ERROR]: Network connection error [04-15 03:28:04][ ERROR]: Network connection error [04-15 04:28:28][ ERROR]: Network connection error [04-15 05:28:21][ ERROR]: Network connection error [04-15 06:28:25][ ERROR]: Network connection error [04-15 07:28:18][ ERROR]: Network connection error [04-15 08:28:22][ ERROR]: Network connection error [04-15 09:28:16][ ERROR]: Network connection error [04-15 10:28:10][ ERROR]: Network connection error [04-15 11:16:28][ DEBUG]: attempt 1 of 3 [04-15 11:16:28][ DEBUG]: Try to connect to server 173.243.143.6:443 [04-15 11:16:40][ DEBUG]: Connection result to server 173.243.143.6:443 = -1 [04-15 11:16:40][ DEBUG]: Try to connect to server using failover 173.243.143.6:8000 [04-15 11:17:01][ DEBUG]: Co

We are doing analytics on ADFS logon failures - Windows event ID 364. We are interested the Relying Party specifically. We want to get counts of the logon failures by the Relying Party. We can see the relying party in the raw event message but it cannot be queried on in the analytics or selected as a display column. Does anybody know how to handle this situation?

 I need to setup ADVPN (using iBGP) between a Hub and 10 Spokes. Hub to Spokes and Spoke to Spoke (shortcut tunnel) communication is needed.Hub and Spoke's Wan Interfaces are connected via Layer 2 VPLS network.Would you please advise if ADVPN setup is feasible in such topology where Hub and Spokes FTG's WAN interface is connected by Layer2 VPLS?  Thank you