Support Forum

Hi. I want to get license for fortinet on VMware, can you help me?

I am login with partner account but i am not getting service option beside support and i am not create a ticket please solve it

Hi.I've got a 60E that I'm replacing under the trade-up as it is EOL next year July.The reseller told me it would simply be deactivated which is fair enough that I don't have to ship the old one back, but what exactly does that mean?Is the old device going to be nothing more than a paperweight going forward, or could it be used as a basic firewall without all the subscription features. I.e. could I used it at home and create forward/blocking rules etc.Or do I simply send it off to an e-waste recycling center?

Hi GuysI'm testing FortiNAC with a FortiGate (as a wireless controller) and FortiAP's.During testing, I noticed that coa does not work as desired. The VLAN is only changed during disconnect/connect of the client.I use the command "sendcoa -ip 172.xx.xx.xx -mac XX:XX:XX:XX:XX:XX -dis" on FortiNAC.With "execute tcpdump -i any port 3799 -v" I get the following output: tcpdump: data link type LINUX_SLL2dropped privs to admintcpdump: listening on any, link-type LINUX_SLL2 (Linux cooked v2), snapshot length 262144 bytes10:44:49.640276 port1 Out IP (tos 0x0, ttl 64, id 43159, offset 0, flags [DF], proto UDP (17), length 78)s-test-fncesx01.42844 > _gateway.3799: RADIUS, length: 50Disconnect-Request (40), id: 0x25, Authenticator: aafde2cc1e57197d88bdfac5632f91abCalling-Station-Id Attribute (31), length: 19, Value: XX:XX:XX:XX:XX:XXUser-Name Attribute (1), length: 11, Value: host/XXXX10:44:51.641526 port1 In IP (tos 0x0, ttl 64, id 3676, offset 0, flags [none], proto UDP (17), length 78)

If we have 2 sdwan rule where each rule have same source, same destination but only have different sdwan member like below, will the source will be switched from rule 16 to rule 17 if internet1 have bad performance?

When I logged in today, I got a network error message. The request timed out. On my Mac, where it was previously working, I deleted the app, redownloaded it, and reinstalled it, but the problem is the same. Is there a solution?

Hello, I use commande : diagnose sniffer packet any 'port 541' 6 0 l i have :42 packets received by filter0 packets dropped by kernelbut the command never show packets, i don't understand why ? I tried in CLI web and sshthnaks

Hi everyone, I am planning to shift my authenticator HA to my DR location, primary will be in Primary site and secondary will on DR site, they both will have different subnets and all IP addresses will be different as it has to be configured on DR site, kindly share your input on how I can make it work

All of our Windows Laptops are joined to our Active Directory domain when we send them out to users.  With VPN a user could change their AD password and the password would sync to the Laptop over VPN while connected.  Now that we are changing over to ZTNA there is no VPN for users to sync their AD passwords.   I could setup a proxy (more like 10 proxies) for all the ports needed by AD to allow password syncing but this sounds a bit over kill.  There must be a solution that others have come across to do this.

Hello everyone, I have a FortiGate 400F and updated it from version 7.2.11 to version 7.4.8. I'm currently trying to access Zabbix via SNMP, but I'm getting errors. When I try manually using snmpwalk on my Ubuntu server, I get No Response From... and Timeout errors. I've tried SNMP v2 and SNMP v3, removed the AUTO settings, and still the same thing.The servers I am testing are added as trusted hosts, SNMP is active on the interface side, there is no Local in policy, and even if I manually add and allow them, timeout errors continue.Another server in the same src network was already accessing via SNMP before the update, so there is no problem with the firewall policies.diagnose debug application snmpd -1diagnose debug enable commands do not produce any logs. They are currently being tested.When I examine the issue at the kernel debug level (with the commands below)diagnose debug flow filter cleardiagnose debug flow filter saddr 192.168.1.212diagnose debug flow filter daddr 192

forticlient shows SSL VPN connection is down as soon as user clicks on connect nothing comes on debug commands too

In normal condition where the internet traffic not fully utilize why in the traffic shapper there is dropped bytes?I assumed dropped bytes will be occured when the traffic is congested or fully utilize. Someone know why?

i have FVE VM-100 with version 7.0.2 and FortiFone 380 on version 7.0.0.110 the time in fortifone is not same as FVE VM-100 and try to change the time zone to be as FVE and reboot it with the same issue , also tried to upgrade it to Version 7.0.2 with the same issue it cannot synchronize with FVE time.can any one help? 

Dear Team , Using the following http://testasp.vulnweb.com/, I'm attempting to set up user tracking so that I can see the username in the logs and use brute force based on the username attampts rather than the session. However, it is not working, so I'm not sure what the problem might be.This screen shot may be helpful.

I build site to site vpn connection from fortigate in HQ and sophos xg in branch.In the tunnel interface in fortigate listen on port8 with ip address xx.xx.xx.230The vpn connection is established, the branch and hq can communicate but if i traceroute from branch to hq i feel strange why the traffic passing thru another ip in fortigate xx.xx.xx.246 and not to xx.xx.xx.230?Here my tracert resultTracing route to 10.7.208.52 over a maximum of 30 hops1 <1 ms <1 ms <1 ms 10.108.150.12 22 ms 16 ms 20 ms xx.xx.xx.2463 29 ms 20 ms 20 ms 10.7.101.24 21 ms 23 ms 18 ms 10.7.208.52

I'm a fairly green network admin, but I am trying to migrate from old switches to new FortiSwitches that we recently purchased. The old switches are a mixture of HPE switches and the FortiSwitches are all 124F-FPOE and 148F-FPOE with a 1024E as the core managed by a FortiGate 201F via FortiLink. Unfortunately, the Fortigate is not the primary L3 device for most of our main VLANS. Therefore, I am trying to extend VLANS from the old switches to the new switches via a trunk port between the new FS-1024E and the old HPE core. Before I made a physical connection between the core switches, I attempted to create software switches on the FG that had two interfaces as members. One interface was a VLAN on a physical port connected to the old core and the other interface was a VLAN on FortiLink. Both VLAN interfaces had the same VLAN IDs and no IP info as the gateway exists on an aging Sophos device. I created one of these software switch bridges for a small VLAN and it seemed to work,

Hi all, I'm trying to troubleshoot an odd issue and am worried that I'm missing something/out to lunch. This is a much shortened version of the issue based on this figure http://www.asciidraw.com/#Draw3254957678224072795 with the VxLan turned down for testing.  Config Notes:[ul]port3 is only referenced in sys interface and the software switch.SoftSwitch1 has l2forward and intra-switch-policy implicit.VxLan implementation only differs from the cookbook for 5.6.6's native VxLan tunneling, so the encap destination is ike.Tested with and without l2forward.[/ul]The Fortigate is seeing ARP requests for 10.0.0.1 at port1 and port3 as expected. Unfortunately it's also sending replies from both ports. So clients see two replies: one with the mac for the interface (port1) that actually has that IP, and one with the mac for port3 (which blackholes any subsequent ip packets). That IP is the default gateway so it's basically blackhole-roulette depending on which r

I have implemented IPsec with SAML on a fortigate and can connect fine to it from some machines but other machines are incredibly unstable. The forticlient (vpn only 7.4.3) will connect, the application will be unresponsive for a few seconds and then will say connected however no packets will flow. What is the best version of FortiClient to use with IPsec/SAML for stability? Also is there a way to download older versions?

Hi, Having Fortigate 400F v7.4.8 and wanted to upgrade it to v7.6.2.Checking in upgrade path where it is showing v7.6.3, v7.6.4 only.Can someone please guide why it is not showing v7.6.2. 

Hi, I have an issue with IGMP snooping.After configuring IGMP snooping on a FortiSwitch Standalone running version 7.2, I’m still experiencing problems with one port. Here’s the situation: Port 3: TXPort 5: RXPort 7: TX  What happens is that many devices on the network seem to be “slowed down.”In addition to enabling IGMP snooping as per the manual, I also considered the multicast group issue — the FortiSwitch 124F does not handle this specific group, so I was told to change it. On VLAN 101, this is what I configured (see attached screenshot). As you can see, my joins are being done on multicast group 238.x.x.x for my device the port 5, which is an RX (receiver), while port 7 is a transmitter. My question is: why do port 3 and port 7, which are supposed to only transmit, also seem to be receiving a large amount of traffic? Everything has been segmented on VLAN 101 to avoid affecting the rest of the network, and that part works fine.But the issue

Hi, we are accessing O365 webmail but post logging to mail it allows to open copilot which shows below url. "https://m365.cloud.microsoft/chat/?auth=2&home=1"  We tried to blocking copilot using application control and webfilter but still it is allowing to open copilot which redirect to url https://m365.cloud.microsoft/chat/?auth=2&home=1 Please guide to block copilot

Recently creating ipsec remote access vpn on fortigate v7.4.4, vpn was created and working on ikev1 but not on ikev2. Forticlient version is v7.4.3. Do you know what could be the issue? Thanks

Earlier this week I updated our Fortigates to 7.4.5, and now some of our 221E APs are not broadcasting. They're online, but the radios aren't working. This seems to have something to do with the region, but everything should be correct. We are in the US.This is happening on 221E devices that are running the 7.4.3 firmware and the 7.2.2 (which I know needs to be updated).               I did a little more poking around and found that the affected APs are showing 0 VAP configs.               Thank you for any help you can provide!

Hi, Seeing this on our firewall for a few users. "sync.console.adtarget.com.tr" Firewall lists it as malware, threat name CnC, detect method infected domain. It appears to be tracking perhaps? Anyone familiar with it? I am pushing full antivirus scan on all systems, and ran malwarebytes on at least one system that was detected with this, and scans found nothing. loginjet Thanks in advance for your help.

 Hello everyone,I recently picked up a FortiWiFi 60D from Goodwill for my personal home lab. I have the receipt and invoice from the purchase, and I am only planning to use this device for educational / lab purposes, not in production.I reached out to Fortinet support, but since the device is already end-of-life, they informed me they cannot provide the firmware. Without it, the device cannot boot properly.I am specifically looking for the following firmware image or any compatible image:  FWF_60D-v5.6.14-build1676-FORTINET.out If anyone from the community has this firmware archived, I would be grateful if you could share it with me, or point me to a reliable source where I might be able to obtain it.Thanks in advance for any help or guidance!