Support Forum

Hi everyone, I'm currently preparing for the Fortinet NSE6 FNC-7.2 exam and was wondering if anyone could recommend the latest and most effective practice resources or mock tests that closely match the actual exam format.Any guidance, study tips, or trusted sources would be greatly appreciated. Thanks in advance.

Hello team, Is there a tool to make aessment on fortigate firewalls? For example for Palo Alto exist Expedition tool Thanks in advanceBR

I can't figure this out. I created an SSID (wifi) which got added to the wqt.root software switch as wqtn.30.wifi. I understand you can't add an interface to SD-WAN if it's in use, but removing wqtn.30.wifi from the software switch only makes wqtn.30.wifi available to add as a member in SD-WAN, not the actual WiFi interface.I've tried adding wqtn.30.wifi to the SD-WAN zone, but the policies don't seem to be working the way I'd expect them to.What's the trick to getting the WiFi added to SD-WAN?

I have an existing Azure environment with a vFG that currently has one subnet. However, we need to add several more VNets with different subnets now, and we want the FG to control the traffic between them.Each LAN side NIC needs to be on a separate subnet, which would put it in a separate vNet.  All NICs have to be on the same VLAN.  I'm not sure how to configure this.    

I'm pulling my hair out.A user in the company is trying to get to a website. however the Fortigate is blocking access to the page. Using Firefox, when I go to the website I get:- The firefox "potential security risk ahead".when I click "Advanced..." I get:- The certificate is not trusted because it is self-signed.- Error code: MOZILLA_PKIX_ERROR_SELF_SIGNED_CERT- View CertificateWhen I click "View Certificate" I get- Organization: Fortinet- Common Name: Fortiguard SDNS Blocked PageI click "Accept risk and continue" I get to:- "Fortinet Secure DNS Service Portal" and "Web Page Blocked! You have tried to access a web page which belongs to a category that is blocked. "Ive checked the site withhttps://www.fortiguard.com/webfilterhttps://www.fortiguard.com/services/sdnsand the site passed both.On the firewall I setup a new policy, with the source being my computer, and the destination being the website i'm trying to get to. I turned off all the security polices and put the SSL Inspection to

Hi,when viewing "FortiView sessions" I'm seeing [object Object] in the source column instead of IP.Don't remember it was like that before... (currently on 7.4.9)  any ideas would be appreciated,Thanks...

Hi, Infrastructure :FGT 100F 7.4.7Core switches : 1024D 7.4.5Access switches : 148F 7.4.5AP : 7.4.5 Just one vlan is unavalaible on some switches and some AP after TIER-2.The root bridge is at TIER-4 on the topology. When i force the root bridge to be at core switch, STP is flapping.Do you some ideas to resolve this issue ?Thanks in advance

I have Forti devices with the 7.2.x firmware family, and i'm planning security updates to mitigate vulnerabilities. However, the PSIRT vulnerabilities site recommend migrate to 7.4.x family to fix them, and in some cases, the vulnerabilities in that family suggest migrate to 7.6.x.From your experience, are these family versions stable? Or do they have a lot of bugs?

I met an experienced network engineer/executive recently in the financial sector and he said he would never use Fortinet firewalls due to the amount of CVE's. As a long time Fortinet customer, I'd love to hear your thoughts. 

Is there a way to see wich users are attached to a certain invitation code?In our EMS under endpoints, we see two invitation codes:We would like to see wich 10 users are using the bottom invitation code. I can't seem to figure out where. Is this possible? If so, can someone point me in the right direction?Thanks in advance.

Hello, I'm testing how to bypass web filtering using a browser in portable mode, for example, with the Brave browser. The plugin is therefore not installed. The "DNS Cache" function in the settings is not enabled. To facilitate testing.   I found several accessible adult or piracy sites. I'm use Forticlient 7.4.4.1887 - Feature   Example with www[.]playboy[.]fr   Have you encountered the same problem, and have you found a solution on your end?   Thank you in advance.    

I want to block Quick because I see a user is generating a lot of UDP 443 traffic. I blocked Quick from the Application Control, but I'm still seeing traffic. How can I block this traffic? I have a FortiGate 120g, Fortios 7.4.9..  I detected that the user is connecting to a VPN... how do I block that? In Wazuh, I seeVPN/TOR processes:    27    284010best regards

Hi everyone,Great to be part of this community. I'm looking for technical guidance on a FortiMail mailbox licensing and RAV (Recipient Address Verification) issue.ScenarioWe have a FortiMail deployment licensed for 1200 mailboxes, but the system reports that the mailbox count has been exceeded.Observed behavior:Groups, distribution lists, and aliases are being counted as individual mailboxesRelay-only addresses (non-existent local mailboxes) are also counted due to RCPT TO verification is not rejecting invalid recipients, even though Recipient Address Verification is configured for SMTP Server VerificationNo Access Profiles are applied on policiesI found this community post discussing 'Recipient Address Verification' and 'Automatic Removal of Invalid Quarantine Accounts' for exceeding mailbox count: Link Environment DetailsDownstream mail systems: O365 and Zoho, ( Cloud Tenants ) Inbound mail flow:Internet → FortiMail → O365 → ZohoO365 is configured as an Internal RelayI

 Hello,I have configured two firewall policies on Fortigate running on 7.2.10,build1706Policy 1: Blocks all malicious traffic using the Fortigate Internet Service Database.Policy 2: Allows traffic required to access specific destination public IPs.The issue I’m facing is that:All traffic matching the destination public IP is hitting Policy 2 directly.Traffic only hits Policy 1 if there is no NAT IP match.It seems that the destination public IP traffic bypasses the malicious traffic block in Policy 1 and goes straight to Policy 2.Questions:• Is this expected Fortigate behavior due to policy order or NAT configuration?• How can I ensure that malicious traffic is always blocked by Policy 1 before being allowed by Policy 2?• Do I need to adjust policy sequence, NAT rules, or apply security profiles differently?Any guidance or best practices would be appreciated.Thanks in advance!Below are the details vip.srv.LbrUat 198.184.54.58 --> 172.16.28.58vip.srv.LbrVpn 198.184.54.5

I have been successfully using the Forticlient VPN for some time now. Today I upgraded to the latest version and since then I have been receiving the following error. I have uninstalled, reinstalled, added the latest MS C++ redistributables and am still getting this error. Any suggestions? 

Hello team!!! I have the following issue:We have many Fortigates in many different places, some Fortigates have a L2TP/IPsec VPN, which I can connect ussing the Windows native client, and anothers Fortigates have an IPsec VPN, which I can connect through FortiClient VPN.I have FortiClient VPN 7.4.1.1736 in my Windows.When I restart my computer, I can connect to any VPN, but after connect and disconnect to any IPsec VPN with FortiClient, I cannot connect to any L2TP/IPsec VPN, until I restart the computer again.Do you know how can I solve the issue or any workaround? Thanks in advance.Regards,Damián

Hello, I deployed Forticlients to hosts via Forticlient EMS Cloud. EMS is connected to domain and user are being verified against EntraID so when I deploy msi file from Intune and run the install script the EMS and VPN connects automatically. Issue comes after I log off from windows user to different account (for example maintanance or admin account for the host/station). The EMS disconnects and doesn't automatically connect again and I need to insert the invitation code to connect it again. Also noting that the issue is not persistent and when troubleshooting sometimes the telemetry connection stayed after switching user to Local Admin and sometimes it just disconnects. We are running Forticlient EMS cloud and deployed Forticlient is 7.4.3 I stumbled upon some older forum and reddit posts kinda describing the same issue but there wasn't any specific fix or explanation. Thank you for any help    

Hi All I just came across a strange issue regarding the Forticlient running on a Windows 10 machine. First some quick background info: Our client as a 200D cluster and several 3rd parties VPN in to their network to administer various systems. The problem with this is troubleshooting is a bit of an issue as we (In this case) need to try and get on to one of these 3rd part machines. Anyway, this particular 3rd party user fires up the Forticlient app (Or webmode VPN) and initiates an SSL VPN connection. The VPN connections no problem, I can see the user connected under VPN->Monitor->SSL VPN. The problem is that no connections to our clients internal network are possible. A simple ping for example just times out. This is where things get a bit more strange... If I try the same (Or any other) vpn account from my own machine, everything works 100%. What's more is if a do a diag debug flow trace, I can see the traffic being allowed be the relevant poli

On a setup that I have is configured to an SSL tunnel vpn for some of the company internal apps. The website and apps can be accessed via various devices once forticlient configured. Lately on iOS the vpn configured and connection is established but the apps are not accessible via any browser safari or chrome. But on android the same configuration but apps accessible. Can help with any insights to make it workon ios.

I want to capture the packets of network interface on Fortigate firewall. Still, I found the function packet capture missed(see photo below). How do I solve the problem? 

Hi there, how can I do the following to increase the security in using a PAM solution?Given is a web launcher target that is only accessable via FPA - so far, this is good. But I want to assure that the login at the target is only made possible via FPA proxy connection with specific credentials.Actually I can use the FPA web filler via browser addon on the target in the login mask - but (now that the connection to the target is possible due to the proxied way started from FortiPAM) I couls also enter any other credentials (as the first login attempt as well as after logging off after using the FPA credential way) ...So I think there is a gap because herewith it is not possible to assure that no other credentials will be tried out or any full superadmin / root access can be made via this connection.I searched for any options and tested with template modifications (web filler attributes) but did not get any successfull behaviour for this. Hoping that this is even possible in FortiPA

Hello everyone, hello experts.I'm currently having an issue with activating an EZVIZ camera. The activation fails and the logs show a 'no session matched' error. I've tried several different methods, but none of them worked.Is there any way to resolve this issue completely, and which configuration steps should I pay attention to? Does using SD-WAN affect this, and what can I do to allow it?Thanks you so much!id=65308 trace_id=430 func=fw_forward_dirty_handler line=401 msg="no session matched"   

I've been reading fortigate secure sd-wan admin guide and other contents on overlays and they all or mostly recommend to use BGP as the routing protocol between sites. I only have 3 sites (hub and spokes) in same country communicating via an ipsec tunnel and I feel like BGP is for big companies with multiple sites accross the globe and does not apply to my case. I was inclined to use OSPF, and the tunnels will be in area O. What do you think? 

I have taken the certification exam and failed as the questions and answers i had were wrong some of them, does anyone know where i can check the answers or where is a reliable place to buy the answers?

Is it possible to block the Instagram app without having to block the entire QUIC protocol? I also can't enable "deep-inspection" because it will cause certificate errors for users (FortiOS 7.4.8).