Solved

Anyone else having issues with support.fortinet.com?Connecting from Denmark, and it's now taken 1.5 hours to register 2 support contracts.. Seems like the site is having issues..

Doesn anybody know if the VPN SSL can be setup in fortigate that is runnig 7.4 with a evaluation licence ?   This is error thta I am getting unable to establish the vpn connection, The VPN server is unreachable or your identity certificat is not trusted (-5)   Thanks in advance..    

Hi,I have deployed a forticlient to a few hundred computers and recently noticed that all users are unverified, so how can I set all of these users to verified or skip user verification. Thanks in advance,

Dear Team,I currently want to fetch a log from a Supervisor/Collector in an operational environment and import this log into the Supervisor/Collector in my LAB environment. This will allow me to create a rule to trigger incidents and finally import this rule into the operational environment. Therefore, I would like to know whether there is a more convenient method to achieve this goal (fetching and importing logs), other than directly capturing the raw log through tcpdump in the CLI of the Supervisor/Collector. Best Regards,Bruce 

Hi,I went through built-in event handlers in FAZ and found some windows privilege escalation handlers. Could I use them with Windows Servers without Forticlient installed? If so, is there any cookbook or docs how to set it up? ThanksRobert

I'm migrating a voip phone system to its own (virtual) interface and subnet on a fortigate firewall.   The idea was to first configure each phone to point to what will be the PBX's new IP address (172.17.200.2). Since the current config on all the phones use the old PBX IP, the PBX's IP address (172.17.2.254) will be the last thing to change (after all the phones have been reconfigured).   So, since there won't be an actual device at 172.17.200.2 during the transition, I'm trying to figure out a way to forward traffic sent to the new IP (172.17.200.2) and forward it to the old IP (172.17.2.254).   What would be the best approach? Just a firewall rule with the old IP as the source and the new IP as the destination, enable nat, and enable preserve source port? Or is there a different approach I should use?   I'm running firmware 7.2.6.   Thanks :)

Hi Guys Scenario: FortiAnalyzer VM64 (Rel 7.4.1) in private cloud, Fortigate(s) send logs via public IP Address to FortiAnalyzer IP Address. Public IP Address listened on port TCP/UDP 514 I follow Fortinet doc's. I authorized Fortigate on Fortianalyzer. Traffic from Fortigate to FortiAnalyzer run correctly (test/sniffer packet etc)   Where is these logs???? :)   Thank you guys

Hello! I am setting up a service that will live behind the Fortigate Firewall and I have the Virtual IP setup. I have inbound and outbound rules setup that should allow traffic, however when I try to ping or anything else to the virtual IP I don't get any response. Because the Public IP will only be used for the service I don't have NAT setup. This firewall also is only connected to one line out to our ISP who also has us a block of IP addresses. Here is the rule:Incoming Interface: Virtual Wan LinkOutgoing: Internal ServiceSource: AllDestination: VIPSchedule: AlwaysService AllNAT disabled. Other rule:Incoming Interface: Internal ServiceOutgoing: Virtual Wan LinkSource: allDestination: allSchedule: alwaysService: AllNAT Disabled Is there anything I am missing?

Hi all, i'm just configured a brand new HA between two Forti 200 f FortiOS 7.0.13,but impossible to synchronize due to error message in attach. Any clue on what it could be? TIS, MG

Does anyone ever use Web Vulnerability Scan in FortiWeb? Generated repoerts looks pretty poor (user friedly about 0%). How I can customize it? For example: one of the reports has about 8000 pages and it's not good at all (test report with test web-server). It is include full html http-response, but sometimes (in some vulnerabilities or suspected vulnerabilities) i don't need it at all. Can anyone help with it? Maybe in future versions of FortiWeb reports customiztion will be improved.I can't do anything except write a some script that will be parse report and delete extra data, but this doesn't seem like a good solution.

Hello everyone We still have some FP421E active which are managed by a fortigate. We are aware that those are end of support, end of sale, end of everything... Unfortunately I have difficulties to find an official (old) compatibility list with these FortiAPs listed, to find out how far I can update the managing fortigate in order to have those FP421E (on 6.4.9) still being supported (fortios wise) so that we can prepare the fortigate for newer FortiAP models... So far in the compatibiilty lists I found the only legacy models mentioned are the FAP221 and FAP223, but no FP421E... Anyone an idea where to find something official?

Hi guys,   Could anyone explain the difference between Shared and Per-IP traffic shapers? I ask this because the Fortinet documentation is different depending on the origin.   According to the Fortinet cookbook: A Shared shaper affects upload speeds whereas Per-IP shaper affects both upload and download speeds.   According to the FortiOS Handbook and NSE4: Shared Shaper: A shared shaper applies a total bandwidth to all traffic using that shaper. The scope can be per-policy or for all policies referencing that shaper. Per-IP Shaper: A per-IP shaper allows you to apply traffic shaping to all source IP addresses in the security policy, and bandwidth is equally divided among the group.   Do you see the difference? What is correct?   Regards, Julián

Dear All,   My Fortiswitches are not listed in the Fortimanager anymore after a swap of ADOM between 6.2 to 6.4 (FMG v6.4.12 The manager notices two switches are added to the switch-controller, but does not show them at all. Looking at the CLI I do see the switches listed in the switch-controller, afterwards tried to add them manually based on SN to the manager but I do get the notification; "failed to sent to device".   Anyone experienced this before? 

Good day The client is experiencing issues when switching between LAN and wireless via FSSO. Seems as if firewall is not refreshing/updating this correctly.When user switches off wifi moving to lan ip address the fsso entry on the firewall is not updated. Still keeps original ip address received on the wifi network even when the wifi device is switched off Please assist Thank you

We have a Device Profile rule acting as our catch all for rogue devices. We have enabled 'Notify Sponsor'. This rule works and sends emails to a shared email account. I need to change this email to something else and I can not seem to find this setting within 'Events & Alarms'.Any help is appreciated  NAC version 9.4.4.0767 Any help is appreciated Thank you

We have had a few issues with connections to FortiGuard. Recently we had to revert to default HTTPS/443 communication, after the UDP/53 we used as a workaround for previous issues became broken for unknown reason.    We have now activated the 'Allow websites when a rating error occurs' option, and would like to add the FortiGuard status of all of our FGT's in our monitoring tool. I can't seem to find any related OID though, does somebody have suggestions how to tackle this?   (ticket ongoing concerning the issue with TAC, but I'm not very confident in a permanent solution)

Hi guys I'm experiencing this kind of issue with FortiSIEM agent on Windows 2022 Server, the agent is not able to send logs related to Sysmon or any other kind of logs, even with different windows agent template associations.When SNMP is configured to send info, the Supervisor is able to show this on performance and analytic real-time dashboards, but when the filter is like "Event type  NOT CONTAIN PH", I can't see any logs, is supposed to be the event, system events, etc... The CMDB show the server with agent status "Running active", the method "snmp, agent, ping", so no connectivity problem here. How can I get some tips to solve this??  Thank you!

HiI installed Forti-Analyzer VM64. When I attempt to login with: admin and no password, the message is "Authentication failure. Please try again..."When I registered virtual machine I set private IP address, is it wrong? Does it need Public IP Address? Thank youMarco 

Hi, I want to know if it is possible to bypass VPN when you are in internal network without using public IP addresses as reference because we have multiple branches using different public IP addresses.

Hi Everyone, I am being tested at work for my networking skills with a huge lab and I dont have any experience in firewalls, I have a ccna routing and switching only and I am being asked to design a 2 site network(site one> fortigate, core switch and access switch, site 2 is a single switch). I think I found a (Second) mistake in the lab(the first was an IP that made no sense and I found in like 15 min of looking). The scenario is that we have a snmp server in our server subnet that is getting attacked and I must block the relevant ports, I only have one fw policy that allows anything from the internet at all that isnt a vpn client(really its 2 because of a redundant backup ISP connect but doesnt affect this), this uses 2 a virtual ips I have for a webserver in a dmz. Internal users and the webserver have internet access. There are no other allowed policies from either internet port, just the ones from the isp to the webserver dmz. Does the implicit deny already cover this attack?&n

Hi, I have been working on a demo project and am trying to configure IPS on my fortigate. I had to turn the feature on and I can configure a fw policy with the profiles. I am very new to firewalls and I have not placed the ips sensors on all the correct policies. I want to modify those policies but when i go into them they no longer have options to change the security stuff(av, webfiltering, ips, ect) do I have to delete the rule and recreate it every time or is there a way to edit? 

Hello! As an MSP we wish to manage the firmware and maintenance for our Fortigates from the Cloud in a central portal.I know there is a way to manage the Fortigates through a VM with a license but we do not wish to setup infrastructure for it. We are looking for a Cloud service so we probably need to have the correct licenses for the Fortigates. I've read about the FortiManager Cloud, but does anyone have some good information about what we need?Like FortiManager licensing or FortiCare per firewall? Many thanks! Best regards,Tim

Hey guys, sorry if this has been answered before, I searched the forums and couldn’t find my case. I’m about to purchase a used fortigate 61e for a very atractive price. The owner is willing to transfer account to me. Current subscription expired in june 2023. My question is whether I can purchase a new subscription now? Would I have to pay for the gap  of 8 months?

Is there an archive with older VM images?In the support -> VM Images the oldest images that are available for download are:7.0.136.4.14 Is there an official or unofficial place where older VM images can be downloaded?

I've reserved specific IP addresses for our company machines based on their MAC addresses in FortiGate's Network > Interfaces > LAN > DHCP > Advanced > Reservations. However, these reserved entries aren't showing up in the DHCP Monitor tool.Key Points:Reservations made for company machines (not smartphones)Machines have connectivity from PC and Server via LANReservations confirmed in LAN DHCP settingsPC reservation on LAN visible in DHCP MonitorSmartphone reservation on Wi-Fi visible in DHCP MonitorWhy are reserved IPs for company machines not showing up in the FortiGate DHCP Monitor? Any suggestions for troubleshooting? Does it even matter when they have connectivity? What does it mean?I appreciate any insights and assistance you can offer. Thank you in advance for your time and expertise!Sincerely,