Solved

Hello,  I have a problem with Forticlient VPN connection. When i try connect to server i got massage "Network error. Can not connect to VPN server". I'm using domain name in Remote Gateway. If I use the IP address everything is ok. Mac OS 13.3.1 (but it already happened to me in previous versions)FortiClient VPN for Mac 7.0.7.0245 (but it already happened to me in previous versions)FortiGate 60F 7.0.11 (but it already happened to me in previous versions) Ping by domain name works ok, access by web browser by domain name works ok. A Windows computer on the same network as the Mac connects perfectly by domain name.  Anyone know how to fix it? Thank you,

Hi I'm trying to allow multiple IPSec dial-up connections from the same source IP, and I found help here: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Allowing-multiple-IPSec-dial-up-connection-from/ta-p/198550My problem is, that I get an error, when I try to set the "route-overlap allow" command. It just says "unknown action 0" I have a Fortigate 60F with firmware v7.4.3 Regards Thomas Barnes

In this topic I will show how it is possible to communicate between fortigate and mikrotik using IPSec. For this occasion, only Mikrotik has a public IP. Step1;VPN>IPSec Wizard> choose the custom tunnel. Give him a name select your network interface, put the IP address of your mikrotik in the IP ADDRESSES field Following this configuration Generate a strong password  Because I'm using a fortgate trial license, I don't have many options for encryption and authentication, so I adapted mikrotik to the reality of my fortigate on this occasion.But it is recommended that you always use more complex algorithms.  phase1,   for phase 2, I increased the strength of the authentication algorithm a little. It is extremely important that you keep in mind the networks of Site A and Site B that you want to communicate, in this case my local network (Fortigate) that I will share with my mikrotik is 192.168.72.0/24, and the network f

Hi Guys,  Good day, Please help to solve my problem on my 60D Forigate Firewall device.I currently avail a 1 Static IP addresss from my ISP Provider, they provide Static IP, Subnet Mask and Gateway.But I cant access the internet using my PC that connected on the Fortigate.May Setup on my home lab is (  ISP Router >> Fortigate 60D >> MY PC )I tried also execute ping on the Fortigate CMD but its always says unable to resolve the hostname.When I tried to change the IP on my WAN1 port from Static to DHCP, the internet access was working but when I tried the setup the static the problem will exist. Thank you!

I am trying to upload a Fortimail image to VMWorstation ( to practice), I have configured the IP and ports but when I open the browser, it does not load the Fortimail IP. Can you help me, please? I always have these problems, I don't know if I have to configure in the vmware workstation (settings) or in the fortimail (cli). I share the commands that I entered in the CLI#conf sys interface(interface)#edit port1(port1)# unset ip(port1)#set mode static(port1)#set ip 192.168.17.15/24(port1)#set allowaccess http https ssh ping(port1)#endWhen I do an execute ping 8.8.8.8, I get this message.#execute ping 8.8.8.8PING 8.8.8.8 (8.8.8.8): 56 data bytessendto: network is unreachablesendto: network is unreachablesendto: network is unreachablesendto: network is unreachabletimeout . . .timeout . . .timeout . . .  

Hello! About FortiEDR,1) What are the dependencies before installation?2) Any compatibility issues for devices where FortiEDR will be installed?3) Any guide/ step by step setup for FortiEDR?4) Any integration with other Fortinet devices/ service for FortiEDR to work?5) Where can I download a image file of FortiEDR for Hyper-V/VMware for a demo environment?

Hello everyone,I need some help, i have a Fortiswitch 148F-FPOE, Fortivoice 300e-t, Fortifones 480B and Fortigate 60e. Fortiswitch working as standalone. I have two vlans, one for data (VLAN10) and one for voice(VLAN20). I want to connect PCs to fortifones and PCs can lease an ip from data vlan and fortifones can lease an ip address from voice vlan automatically. How can i configure the switch ports to achieve that? Thank you

I am migrating a Forticlient EMS on a new server (2019)On the install, it seems that the IIS was running, so The EMS couldn't use it.It's now using only 443 with https.I have disables iis, but how can i turn on the 80 port in my current install of EMS to use letsencrypt ? Thank you.

On my lab,I licensed the EMS server with a trial license through my forticloud account, see image below:             I noticed that there are only 3 licenses to test the clients.From direct experience does anyone know if it is possible to get trials for the ztna component from Fortinet ?Best Reagrds

Hi Everyone,I'm running Fortigate VM 7.0.14 for ESXi with 15dd trial license, the webui is lacking the "Security Profiles" item: is this due to the trial license or should I enable it from anywhere?Thanks

Issue has been detected in the FortiSOAR RDK (Rapid Development Kit) pertaining to the Onchange event and the associated input fields' display behavior. Particularly, when triggering the Onchange event for certain parameters, such as 'Without a User - Application Permission', the expected behavior of enabling the server URL textbox is not observed.    Onchange issue

I'm deploying FortiClient 7.2.3 using Jamf to macOS 14 devices. The issue we are having is that even though we have a mobileconfig profile deploying the necessary certificates and PPPC settings to the devices, when the FortiClient connects to our EMS server for the first time, it prompts for admin credentials for a certificate change. But regardless if you enter the password or cancel the prompt no change is made to the certificates in keychain. After the initial connection to EMS this prompt does not re-appear. Has anyone been able to get rid of this prompt? This wasn't an issue when we were using version 6.4.8 of FortiClient. 

FGT40F

I just ran into this: We have a Windows DHCP that has a scope for a vlan.the vlan interface on the FGT100E is set to do dhcp relaying to this Windows DHCP.the Windows DHCP also has dhcp option 138 set for all scopes it has.If I now connect a client to this vlan interface and set it to request an ip via dhcp it does get an ip from the Windows DHCP. Also the correct scope is used. Networking works fine so far.However the DHCP ACK is missing the option 138 completely. If I do packet sniffing on the FGTs interface where the DHCP Server is connected to I do see the forwared request from my client and I do see the answers including the ACK. This ACK does contain option 138 but the value in the option is not what is configured on the DHCP Server. And as said the client doesn't receive option 138 at all. Did anyone exprience this or similar and has some hint for me why that happens?

Hello All, i try to use proxy ONLY for the Fortinet Client on Windows.I used this XML config (from docu).<proxy><update>0</update><fail_over_to_fdn>0</fail_over_to_fdn><online_scep>1</online_scep><virus_submission>0</virus_submission><type>http</type><address>myproxy</address><port>3299</port><username></username><password></password></proxy>BUT still the Fortinet Client connecting without Proxy.I also installed the newest Free client 7.2.4.0972_x64 Using the proxy in Windows network settings is working, means VPN via proxy is working. Any Idea why FortinNet client ignores the proxy from the configuration?Thx and rg A.  

What is the Authentication Servers for in the FortiClient EMS Cloud setup and how does it differ from the SAML Configuration thats under User Management?

Hey,  We are a small startup looking into buying a network firewall that would be easy to connect to the Fortinet VPN.  I searched for articles describing how to do that with Juniper or Cisco, and that doesn't look straightforward. Therefore, I'm seeking advice on a modern, rack-mounted device suitable for managing a very modest amount of tracking that can be easy to set up as a Fortinet client.  Best,Yevheni 

Hello, I would like to have confirmation if possible (I'm a novice in the field). I have this message "Log-forward 'ld-xxxxxxx' lag behind 99.92%, discarded 9551454767149537bytes, every 10min and I think the FAZ can't forward all logs to ELK. Can anyone confirme my thinking  Even in the graph < Receive Rate vs Forwarding Rate > I can see that number of receiving log is heigher than the forwarding one. Thank you for your help.

How can I upgrade from version FP221C-v5.2-build490 to version v6.0.6?Is there an upgrade path available?

Hi,On Vmware ESXi platform is present a FAZ with version 7.2.4 Premise, on the vcenter where I am operating the cpu and ram resources are available I have performed similar operations on other Fortinet vm's (Fortigate, ect) Under edit settings -> cpuThis is the situation             Has anyone had a similar problem is it possible to have to have 2 cores each with 8 sockets ?I don't think it's a fortinet license issue or the vm image installed on the vm. I thank you for your attention and look forward to your opinion.Best Regards 

Hi, recently i started an application on linux that i need to use a database on another network, so, i have to use a VPN to connect in this database.  When i run the command 'fortclient vpn view' i got the following message: Client Certificate: NoneAuthentication: DisabledSingle Sign On (SSO) for VPN Tunnel: DisabledAuto Connect: DisabledAlways Up: DisabledSave Password: Disabled  How do i enable the option Always Up and Auto Connect? the command 'forticlient vpn edit' don't give me this options. Sorry for my bad english    

Hello,I´d like to setup #FortiClient FortiEMS Cloud AD-connector. But the documentation lacks the information where to find the Where to find the Connector UIDhttps://docs.fortinet.com/document/forticlient/7.2.2/ems-administration-guide/787816/ad-connectorbest regardsMartin Haneke

Hi everyone,  Can you guide me how can I allow Whatsapp voice and text only and deny video calls and file transfers?  The firewalls we are using are on the version 7.2.6, Fortigate 100F.  Thanks in advance for any guidelines.  Regards Mihail

what is serial no. of firewall which we use to create service ticket?

is there a settings in fortigate that limit the SSLVPN connection duration ?we have users reporting to us that SSLVPN connection will disconnect after 8 hrs.how do i extend the hours beyond 8 ?