Solved

Hi,   Someone know what means interfering SSIDs in my dashboard ?   In my dashboard it show me many "High" interfering SSIDS.

Hi   We have 2 Vdoms in our FortiGate and I wanted to backup my device. So should I backup only the global or all 3 of them individually?

Hello, We received a "set_dns_retcode" error on one of our devices while installing the collector, but when we ping over the hostname, it resolves the ip. what can we do?

Hi,   If I select manual mode on sd-wan policy, in what circumstances fortigate changes the wan1 to wan2?  As far as I know, there is no SLA in manual mode. So when the wan1 link has high latency and lots of packet loss, how it is going to change the WAN link?

Hello i want to know how fortigate can work with layer 7 ( layer application ) !!  or what are feature security that allow fortigate work  with layer 7!! i wait a reply from expert security Thanks

Steps to reproduce.   Use Phishing Email solution pack and enable extract attachment option on. Exchange Mailbox defaults to HTML format for emails. Create a text file and add a line into it like "https://gumblar.cn" Attach above text file and send it to the mailbox, which is configured to read emails through Exchange connector. Observer "03 Enrich - Extract Indicators From Attachment" Playbook. In "result" key , we will see a value as "https://gumblar.cn/<p>" "<p>" is getting wrongly appended to the url. Test Playbook is attached with sample string for testing, please unzip it and import into playbook collection. Screenshot is attached.

Hi I have port1 (LAN) and created 10 sub-interfaces for Vlans. So in Source interface selection box on all fortigate configuration, should I select Port1 or should I select Vlan interfaces?

Hello, I have a problem with the OneDrive Application.OneDrive not sync the all files.I think the problem comes from the HTTPS inspection. FortiOS : 5.4.5 Thank you for your helpCordialy,

Hi,   I created a traffic shaper and applied it on a traffic shaping policy and hit ok. but when I open the policy, it is empty but from outside as you can see in the image , source and destination and all other information are available. what is the problem?    

I bet that I am missing an simple solution. Via the FortiGate, I would like to filter for ports that are Down on one or more managed FortiSwitch's using the WiFi & Switch Controller / FortiSwitch Ports page. The column Port displays the port number and the up/down status. I see that I can use the funnel to filter by port number. Can we filter by up/down status instead? If not here, is there another way to accomplish this?

Any ideas why I get "entry not found in datasource"? The cert is present:       config vpn certificate local edit ourCA get Valid from: 2022-xxxx Valid to: 2024-xxx Root CA: Yes CA:TRUE state : OK range : vdom config firewall vip edit rule2 set type server-load-balance set extintf xxx set server-type https set extport 443 config realservers edit 1 set ip xx set port 443 next end set ssl-mode full set ssl-certificate "ourCA" end # set ssl-certificate "ourCA" entry not found in datasource value parse error before ourCA command fail. Return code -3          

https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/388078/transfer-a-device-to-another-forticloud-account   In this article is guide to transfer one device. How to transfer both devices? I have tried and one device has been transferred. Backup device have status that is transferred, but it does not appear on Cloud Asset Management.   

Hello everyone,  I have some questions about how to configurate a Vlan for CCTV IP. Currently I have one only Vlan for my all devices, but for security I wanna implement a second Vlan for security cameras, my questions are: 1. if a wanna create a second vlan, Will I need another switch? 2. Will i need a administrable switch?3. in case of no, what i need for this implementation? sorry but i have some questions, than if you can, please add a connection graphics. or if only needs configuration in fortigate please tell me. 

Dear Team,Whether FortiSIEM support the default logon report of Supervisor/Collector Terminal/CLI?I know that FortiSIEM GUI(admin) supports a Default Report "All FortiSIEM GUI Logon Attempts",But I can't find any report that shows the logon of Supervisor/Collector Terminal/CLI.I would like to know whether this default report exists.Or How I can create a report template to meet it. 

Our fg100, running on 7.4.1, enters memory conserve mode every day at 4:41pm.  Support has sat with us and watched it happen for multiple days, they gather all the logs they need each time. They offer no solutions, their only response is "we need more logs".  If TAC has nothing better then I'm at a loss of what to do next.

HelloWhat are the features that are disabled when my FortiSIEM's license expires?

We have the following: we created a IPSec L2TP VPN and on de client computers we created a scheduled task so when the work from home they automatic get this VPN Connection.But when they work in the office this VPN is not nessesary but in some cases it is created anyway,I tried the following: Technical Note: Restricting IPs to connect to a VP... - Fortinet CommunityThis seems to work for one customer but another customer who is using SDWan it doesn't work. Tried to add Wan1 an Wan2 as interface but some of the clients still creates the VPN connection when they are in the officeRunning fortiOS:v6.2.15 build1378 (GA)Question is what is the best way to block VPN connections from the internal network to the Fortigate?

HiI noticed that there is no "Maximized Bandwidth" option under SD-WAN rule section on FortiOs 7.4.1. So how can I use multiple WAN link at the same time?

I have an IPsec VPN connection between FG100D and SSG. Firmware of FG100D is 6.2.10. Recently the VPN connection went down and couldn't reconnect. I capture the IKE logs as below:   ike 0:To_BYHN: schedule auto-negotiateike 0:To_BYHN:To_BYHN: IPsec SA connect 51 222.252.97.229->124.158.3.197:0ike 0:To_BYHN:To_BYHN: config foundike 0:To_BYHN: created connection: 0x149b2d00 51 222.252.97.229->124.158.3.197:500.ike 0:To_BYHN: IPsec SA connect 51 222.252.97.229->124.158.3.197:500 negotiatingike 0:To_BYHN: no suitable ISAKMP SA, queuing quick-mode request and initiating ISAKMP SA negotiationike 0:To_BYHN:745434: initiator: main mode is sending 1st message...ike 0:To_BYHN:745434: cookie 137dd2ae1f9fb3b2/0000000000000000ike 0:To_BYHN:745434: out 137DD2AE1F9FB3B200000000000000000110020000000000000001240D00003C000000010000000100000030010100010000002801010000800B0001000C00040001518080010007800E00808003000180020002800400020D0000144A131C81070358455C5728F20E95452F0D0000147D9419A65310C

HelloI have some traffic blocked with the following message. Any idea what it means?msg=" redirect mismatch, drop" Logs from GUI. Something also strange for me is that the source interface is "unknown0", and I don't have any interface of this name.Any idea? 

I am redistributing BGP into OSPF, but I would like to know if it is possible to redistribute to a specific neighbor i mean not to all ospf FGT in the same area 

Hi AllI have a ping problem in the ipsec tunnel. Vpn tunnel up. The connection is established. I can reach the other party's gateway. When I ping from the local network, it does not work, but when the other party pings me, I can reach and connect. After 10 - 15 minutes, I cannot ping again. When the other party pings me, I ping again. Meanwhile, the tunnel never goes down and is up.My Device Fortigate 60FVersion 7.4.1

Hi all, I had FAZ with last version but, cause I encountered several "cosmetic" problems, I downgraded it to previous 7.2 version. Afther that, I can't find old logs, they are all lost. I've tried to upgrade to 7.4 version  by uploading a backup but the result is the same. Could you help me to obtain access to these logs? Is it possible? Thanks ¡¡    

Hello people, I hope you are well. I come from miklrotik and now I have to check out a residential (for older people). I see that it has a mikrotik 951, in the ARP table I see 111 entries, and in the DHCP server there are 132 records. It has a 1Gb drop and a 500M rise. What Fortinet Router can you recommend?Tank You!!!

We currently have an unused Fortigate device, and would like to configure it to test how our software behaves through different types of proxies. To this end, I would need to be able to configure multiple, completely separate proxies on the device. 1 without authentication1 with (anonymous) authentication1 with Kerberos authentication1 that allows only HTTP/21 that doesn't allow HTTP/2Ideally these would be accessed on 5 different IP's, which are all on the same physical interface (which is also the outgoing interface). I've create multiple interfaces (loopback) and gave them an IP, and then enabled the explicit proxy setting. But I cannot seem to be able to create a proxy policy and specify what it applies to (the 'enabled on' section is always fixed)? If there is a way to do this, please let me know how to go about this.