Solved

All, Can anybody here assist me with outbound traffic events. (from a small number of our internal hosts to the internet) Event: SSL.RSA.Temporary.Key.Security.BypassAdditional information: http://www.fortinet.com/ids/VID40207 Since a few months a fairly small number of machines generate an awful lot outbound events to specific IP addresses.We are pretty confident this is not something to be worried about as we have leveraged additional tools to investigate our internal hosts. Still very interested what this can be related to. As a reference point, in the month of January 3 hosts generated 40825 events. Following IP addresses are noted for these 3 hosts as the Destination address they are communicating with. (AT&T addresses belonging to CerfNet) 12.130.55.203: 14928 events12.130.55.186: 5279 events12.130.55.56: 10519 events12.130.55.172: 3346 events12.130.55.187: 3386 events206.19.56.155: 3347 events Anybody any idea? R

I have a little script that uses scp to download the current configuration to my server, there's a second part of the script that does a diff with both files and warns me when there have been modifications.I am having an issue with the  private keys for "Fortinet_CA_SSLProxy"  and for "Fortinet_SSLProxy", weird enough the certificates are the same all the time, so i'm a bit lost here. Aren't the backups mean to be identical? (other than the  conf_file_ver)? 

I am trying to install a wildcard SSL cert from Go Daddy and having issues.  Anyone have some documentation on this?  I have seen documentation with regular certs and a CSR but this does not require a CSR.

Hi ! I have a Fortigate 90d model, and i have to open ports like 6080, 1433 and 1434. I wish that those ports to be open only to a single internal IP addressWhat should I do for make this simple task ?

I have a need to NAT outbound traffic to a specific Range if the traffic needs to go across a L2L tunnel. Remote customer gave us a range, so traffic going to them is 'seen' as from that range. I have the L2L tunnel up, how do I make the fortigate nat the traffic?  Thx

Hi,In an A-P HA cluster, with the Master down (Slave has become Master), what happens when I go and change config and the actual master comes back and takes over as master again? Will there be a config sync issue?Thanks for any insight. Bye,Marki

Hi my foriclient has been working fine for 3 months until today,  on Windows 10.  Defender is disabled,  no other AV / Spyware etc installed.... have confirmed that Defender isn't running Started the PC today and I am seeing the windows notification panel flashing constantly with "Update Virus Protection Virus Protection is out of date, Tap or click to update Foritclient Antivirus" which is then after a second or so is replaced with "Update Spyware Protection Spyware Protection is out of date, Tap or click to update Foritclient Antivirus" This cycles constantly,  if I click the notification, occasionally a windows Security and Maintenance window appears asking me do i want to run this app... the app is "c:\program files (x86)Fortinet\forticlient\FCWsc.exe" ... I allow this... nothing then appears to happen I can't open the Forticlient Console,  click the tray icon,  select open console... nothing happens. Can't uninstall as the For

Hi Guys, I did not passed for the NSE 400 exam last week ( 63% :( ). One of the Q's was as follows: Which model's supports built-IN enabled DHCP while installing the Fortigate for the first time. I cannot find any documentation and/or list which describes this. Could someone know which model's does? Thanks in advance!

Hello,i have fortigate 200D i want some one tell me how to download and install fortianalyzer  thanks

I have a 600C with a recurring crash problem.  It is running 5.0.11, but the problem has persisted since 5.0.4 or so. About every 1-3 months, the gui will show that all interfaces are connected at 1GBPS and that each port has sent/received approximately 191 billion packets if I over over a port (not shown below).    Once the gui reaches this state, it is usually about 2-3 days before the firewall stops working altogether. At that point, I need to do a full power down/power off reset. If I just do a warm boot, it will not recover and will stop mid-boot with an error message. Has anyone experienced anything similar with a 600C? I am beginning to think this is a hardware issue. Suggestions welcome. Thanks.  

Hello, I am pretty new to Fortigate products, so sorry in advance for any confusion in my post. I am using a fortigate 60D in dual WAN and using it as NAT mode. We have three ISPs at work, and want to use two ISPs at the same time to do traffic load balance (currently static routes are used for particular traffics), and want to use the third ISP as a backup for automatic failover. Is there any way how I can use the DMZ port as WAN3 to achieve above?

Hello! Guys, need help to solve the problem. There is one ISP, one cable is connected to the first port of FG300D. I have a block of IP addresses – for NAT and Transparent modes. I need to create 2 VDOMs - one of them will work in NAT mode, the other will be in Transparent. Unable to add already used by root VDOM WAN interface to the second VDOM (Transparent). Is it possible?I’m sorry for my English  - I am doing my best )))  

helloi'm looking for a guide (video) to configure exchange 2010 on fortigate 80d.Thanks

Windows 7 Pro SP1 64bit laptops - I've had just a couple of laptops that I can't install the client on.  I'm using the ForticlientOnlineInstaller.  Windows throws the msg, and I have to rollback the install.I've used gpedit.msc - User Configuration - Admin Templates - System - Driver Installation - Code signing for device drivers - Enabled - Ignore - reboot - to tell Windows to ignore the unsigned driver.  But still no luck, same msg from Windows.Is there a difference between the FortiClientSetup_5.4.0.0780_x64.zip client and the OnlineInstaller.exe?And does anyone have a fix for this issue?  I doubt that I'm first one down this road.It could be something within Windows on those particular laptops.  

What about the new 40e, compared with 60d? Best regards and appy new year

Can the wireless built in to a FortiWiFi 60D be used in conjunction with a FortiAP 221C? In one Fortinet installation the coverage from the single FortiAP 221C is barely adequate. Using the FortiWiFi wireless would help the coverage. It looks from the UI on the FortiWiFi 60D that this is possible but I'm not sure if it is.

helloi am a new user for fortigate60d i want to make a manual maj for antirus and idps in my fortigate60d but it failed..this is an extract to my console manager when i download the signature on fortinet.support  i choose os 5.00 can we confirm me that's correct.i dont understand why the maj is failed sorry for my language but i am french .thanks to help me  

Hi guys! I have a Fortigate 60C which cannot be upgraded to 5.4, however my FortiAP supports FortiOS 5.4.Do you know if it's possible to manage the FortiAP (v5.4) from my Fortigate (v5.2.5)?I will not try this until it's confirmed, there is no support for downgrade from 5.4.  

Hi All, Does Fortigate support recursive DNS?,correct me if I'm wrong, based on my testing Fortigate only assigned same systems DNS or interface (DHCP) like other other firewall brand. At this moment I have a client which using pfSense as their primary firewall and DHCP server assigned client DNS and gateway pointing to firewall internal interface. Appreciate if anyone can clarify or guide me if there any setting that miss looked for the recursive DNS feature.Thanks  

Hi all,I've got a strange behaviour but I cannot figure out why.I have a couple of ADSL modems (in bridge mode) connected to wan1 and wan2 of my fortigate 60D.I created a load-balanced wan on the firewall which.The modems have an IP on 192.168.200.0/29 where the management GUI responds.To be able to reach these addresses  I created a policy which NAT the packet directed to this address behind an address belonging to the same network.Then I created a static route to direct the packet to the right interface, wan1 or wan2, depending on the destination target.Despite this I can reach one modem GUI only while the other is not responding.Of course If I directli connect the modem to my PC I am able to browse its GUI.Do you have any idea about what I am missing? Here you are the flow trace of the packet directed to the modems:  MODEM1 (working) id=20085 trace_id=7 func=print_pkt_detail line=4469 msg="vd-root received a packet(proto=1, 10.9.10.100:21859->192.168.200.

Hello, If I make a dial up vpn and use the forticlient on the clients.  Am I correct in assuming the only fee based part is the AV built into the client?  I can use the client without a subscription if it is just used to bring up a tunnel? Thanks, ponder

Hello, High level, I have a 100D running OS 5.4, 2 ISPs with multiple public static IPs.WAN 1 and WAN 2 are setup in WLLB so traffic uses WAN1 with Failover to WAN2. I have configured 2 Hardware Switches grouping ports 1-8 for LAN and ports 9-12 for VoIP.My configuration is setup where the LAN in on a separate subnet (and internal switch) from the VoIP.I use WLLB Rules to route VoIP traffic out WAN2 and rely on the WLLB to control failover support. Now, I would like to setup an additional port (port 15) as another WAN port with a static IP from my WAN1 ISP provider.I'll use this port as my endpoint for site to site IPSec VPN tunnels and would like to route the traffic to the LAN subnet.When I try to configure the port (which is in interface mode) to an external IP, I get an error message that the subnet conflicts with WAN1.  Am I missing a step or is there a better way to configure an additional WAN port on the same external subnet?Other suggestions? Thank

HelloI updated my FortiClient today on my Mac with 10.8.5.  When I try to log in using Remove Access I now get the above error message.How do I correct?Or can I download the older version ( 5.0.6) that worked fine with Remove Access. ThanksTim

Hi All, Appreciate if you guys can clarify or assist since I'm quite new with Fortigate product. current Fortigate 60D has been configured VLAN interface on physical port, My question is does the firewall policy or routing is required for inter vlan communication?. Thanks

Hi all,while I was looking at log (forward traffic) I realized that my Fortigate was unable to recognize application. In the "application name" column there is written for all packets logged unknown.Do you have any idea about what is happening?I am using a Fortigate 60D with 5.2.5 firmware Thank You Regads