Support Forum

want download fortiauthenticator vm

Hi, I have a couple of related questions about FortiSIEM Windows Agent architecture:Is it possible to install the FortiSIEM Windows Agent and configure it to send event data directly to the Supervisor, without going through a Collector? Does an All-in-One Supervisor deployment have built-in Collector capabilities? In other words, can the Supervisor itself receive uploads from Windows Agents, or is a dedicated Collector node always required for Agent-based log collection? If a separate Collector is mandatory, is there any workaround for small/single-node deployments, or is a Collector required regardless of environment size?

I'm facing a strange issue with a new FortiGate VM instance running on Proxmox.EnvironmentHypervisor: Proxmox VE FortiGate: FortiGate VM Disk image: fortios.qcow2 Access: Web GUI over HTTPS Version: FortiGate-VM64-KVM v8.0.0.build0167.260420 (GA.F)IssueI created a new FortiGate VM using the fortios.qcow2 image.The VM boots successfully, and I can access the FortiGate GUI login page. I can also enter the admin credentials and authentication is successful.However, immediately after successful login, I am logged out and redirected back to the login page.So the behavior is:FortiGate GUI Login ↓Enter credentials ↓Authentication successful ↓GUI starts loading ↓Immediately logged out ↓Redirected back to Login pageThere is no normal session timeout involved because the logout happens immediately after login.Troubleshooting already attemptedI also tried increasing the administrator timeout:config system global set admintimeout 30endHowever, this did not res

Can you link your fortinet work account with your personal account so that the NSE’s transfer, kind of like microsoft’s way?Does it work all the time or does it depend on different factors, if so, what are the factors that make the process difficult or complicated?

Would it be possible to get more info logged on the reason why  the disposition was deferred? is ther a setting in the configuration that regulates this? Can a whitelisted sender also be “blocked” like this? Would whitelisting of the domain or sender by the user be sufficient  to avoid this?  Could the receiver be informed when there is a mail stuck  as "Accept; Defer disposition"? With the reason why?

 Hi everyone,I’m having an issue when trying to activate the trial license on a FortiGate VM running on GNS3 (KVM).When I execute the following command:execute vm-licenseand confirm with y, I get this error:Requesting FortiCare Trial license, proxy:(null) curl forticare failed, 28 Failed to request forticare license 28. Failed to download VM license.Additional system information:FortiGate-VM64-KVM # get system status Version: FortiGate-VM64-KVM v7.2.13,build1762,260128 (GA.M) License Status: Invalid VM Resources: 1 CPU/1 allowed, 1992 MB RAM/2048 MB allowedThe VM image used:FFW_VM64_KVM-v7.2.13.M-build1762-FORTINET.out.kvm.zipThis is a fresh deployment on GNS3 using KVM.  

Issue: my domain xyz.com is build on next js when webiste is loaded xyz.com/_next/static urls are loaded which loads multiple js files , waf ddos policy has threshold 50 req. and multiple js files are when loaded waf suspects it as DDOS attack.... now i cant increse threshold for whole domain xyz.comwhat is the solution ?

Hello,I have two FortiGate 1800F units running FortiOS 7.4.12. One unit is licensed, while the other is currently unlicensed. I am planning to purchase the required license for the second unit, but it may take some time.For the time being, I need to configure the two units as an HA cluster before the license for the second unit is available. Is this supported? Will HA, configuration synchronization, and failover work properly during this period? Are there any risks or limitations I should be aware of?I would appreciate your advice and recommendation.Thank you.

 Hi All , Am using the following network and wanted to implement Remote Access VPN over Fortinet60F using public IP available on Wifi DSL modem. What would be the preferred method to deploy Firewall Transparent or routed mode. as per my knowledge am not able to implement RA VPN using transparent mode. Right ?Secondly if am not using DHCP on DSL modem can I assigned IP from Fortinet LAN Interface DHCP service and WIFI authentication from DSL modem for connectivty purposes. Or any better idea to do it. Thanks in advance for tips and ticksregards      

We are experiencing an issue with our FortiGate DHCP server where IP addresses are repeatedly marked as "Removed due to conflict."We have already performed the following checks:Verified that there are no DHCP reservations or static mappings for the affected IP addresses. Confirmed there are no duplicate static devices configured on the FortiGate. Changed the DHCP IP range to a new subnet/range.Despite these changes, the issue still occurs and clients continue to receive the "Removed due to conflict" message.Could you please advise what else we should check or how to permanently resolve this issue?Thank you.

Hi Team, could you please help clarify this for me?I just want to make sure whether FortiMail is included in the UTP bundle. If not, how can I use or activate it?Thank you and hope to hearing back from you.

Hello,I followed this technical tip:Fortinet Technical Tip – Quickly isolate hosts that have disabled or uninstalled the Persistent AgentIt works very well when I stop and restart the Persistent Agent. The host is correctly detected as At-Risk, and I can see the VLAN change from the remediation VLAN back to the production VLAN as expected.However, when I completely uninstall the Persistent Agent and then reinstall it, the host remains in "Agent Not Communicating" status. The status does not change after the agent has been reinstalled.After reinstalling the agent, I have to delete the host from FortiNAC and restart the workstation before it is detected correctly again.Is this expected behavior?I also have a question regarding the following statement from the technical tip:"An Event Mapping can be created that immediately changes the host status to 'At-Risk' as soon as an event 'Persistent Agent Not Communicating' is created."Does this Event Mapping apply to all hosts, regardless of thei

Hi everyone,We are running a FortiClient ZTNA Access Proxy deployment for our UAT environment and have run into a persistent connection loop immediately following the latest Fortinet ZTNA update. We are looking to see if anyone has hit this specific behavior or has a confirmed Bug ID/Workaround.🚨 The Symptoms Error Encountered: ZTNA Application Not Found (Error Code: 022) with the message Client certificate is not provided. Device Information: N/A. Behavior: It only affects users connecting from external networks (off-fabric). Internal corporate network connections work fine. The Loop: When we perform clean reinstalls or manual re-registrations, it works perfectly for exactly 2 hours, and then abruptly drops back into Error 022. 🛠️ Troubleshooting & Root Cause Analysis Done So FarWe have thoroughly mapped out the behavior and ruled out basic configuration errors: The 2-Hour Pattern & Compliance Discovered: * The 2-hour survival window strongly pointed to a periodic server

I recently bought a Fortigate 60F from Ebay. There is no firmware installed nor is there a backup firmware. How can I get a copy of a firmware to load for my lab? Or is it possible to get past this step to use for a lab?

Hello,I am experiencing a Security Fabric GUI issue on a FortiGate HA cluster after an HA failover and failback.Environment:- Root FortiGate: FortiGate 101F HA Active-Passive cluster- FortiOS: 7.4.11- Five downstream FortiGates- All FortiGates are running FortiOS 7.4.11- Security Fabric uses TCP/8013Issue timeline:1. Before the HA event, the original primary FortiGate displayed all downstream FortiGates correctly in the Security Fabric device dropdown and topology.2. The original primary FortiGate was powered off.3. The secondary FortiGate became the new primary.4. Immediately after logging in to the new primary, the Security Fabric device dropdown already displayed "No topology devices", and the topology could not be displayed correctly.5. The original primary later came back online and became primary again.6. The issue remained present after the failback.7. However, when logging in directly to any downstream FortiGate, the full Fabric Root and downstream device list is displayed corr

Hifound this https://www.google.com/url?sa=t&rct=j&q=&esrc=s&source=web&cd=&ved=2ahUKEwjWmp6foZuWAxUe1wIHHSbkAusQFnoECBsQAQ&url=https%3A%2F%2Fcommunity.fortinet.com%2Ffortimanager-27%2Ftechnical-tip-how-to-validate-a-provisioning-template-via-api-call-229028&usg=AOvVaw3Jc-lv31tjbMtHsp7LpW2V&opi=89978449only i don’t have access, does this aricle still exitst? 

Hello guys, I would like to understand whether anyone has experienced a similar issue and, if possible, identify the root cause.I recently performed a migration from a pair of FortiGate 501E devices to a pair of FortiGate 401F devices. Both the FortiGates and FortiManager were running version 7.4.11.The firewalls being migrated were the central hub of our entire infrastructure.They were managed by FortiManager and used SD-WAN Templates extensively.In addition, they were acting as the VPN hub through VPN Manager, with approximately 100 remote FortiGate devices connected to them.To prepare for the migration, I brought the new 401F devices online and initially configured only the primary unit.At that stage, the two new firewalls were not yet configured in an HA cluster.I imported the complete configuration from the old 501E and assigned the new device to the existing SD-WAN template in FortiManager.The only step I intentionally postponed until the migration day was adding the new firewall

I have a Fortigate FGT200F running 7.4.11.It has a large number of physical connections that I’d like to rationalize down to VLAN interfaces on a trunk of multiple 10G lines. As such, the “names” of many of my networks are going to change from “portx” to “some-name-I-pick”. This has follow-on consequences for firewall objects and policies. Naturally, I don’t really want to delete all my policies and objects to get this done.Many of the objects are tied to associated-interfaces. To ease the migration, I tried as a first step to reconfigure the objects by removing the “set associated-interface” command from each object in a backup of the config, then restoring the altered backup.The firewall accepted the altered configuration and booted, however it permitted no traffic to traverse any policies while in this state. During this time it logged errors such asaction="connect" status="failure" reason="SSL accept failed" msg="40B84138E57F0000:error:0A000416:SSL routines:ssl3_read_bytes:ssl/tls

Hello everyone! I'm looking for a way to make FortiClient (the free one, VPN only) save user password. When I fresh install FortiClient VPN (7.4.3 hotfix 1.8758), this checkbox is not present at all. I've read some manuals on XML configs and found configuration parameters that make this checkbox visible. I craft a .conf file with the parameters, import it, the checkbox I wanted is present, but once my connection is establishsed, the utility goes to tray, and then I untray it back (a lock sign in the top right corner is present even if I turned it off before), I break the connection I've just established, and all the checkboxes are gone from GUI.What am I doing wrong and how to fix it? It's just really frustrating to re-enter my password everytime. Any help is appreciated. Thanks in advance! 

So i m doing a demo for a project i m doing for a client and i activated the free trial doe 200f series fortigate that work as HAtransfered the assets into another forticlould account but the ems free trial is still on the older accountCan anyome help me with this please an is the free trial can be activated just once even if i move the fortigateCan i remove the trial from the old account and activate on the new oneAny help is apperciated because i m stuck now and been ike this for 2 days

Hello everyone,I am currently working on a production firewall migration from a FortiGate 500D (FortiOS 5.6.x) to a FortiGate 1000F (FortiOS 7.6.x).After migrating the configuration, we are facing an issue where public traffic reaches the FortiGate 1000F but does not reach the internal server. If we reconnect the old FortiGate 500D with the same network topology, everything works normally.EnvironmentSource firewall: FortiGate 500D (FortiOS 5.6.4) Target firewall: FortiGate 1000F (FortiOS 7.6.6) Same public IP addresses Same ISPs Same internal servers BGP is used for routing VIPs are used for inbound servicesWhat has already been verifiedWe have carefully compared the configurations of both firewalls and checked the following:VIP configuration Firewall policies Address objects and address groups Static routes BGP routing Interface mapping Central NAT and Policy NAT Security policies Traffic logs diagnose debug flow Routing tableWe also disabled Central NAT and tested Policy NAT, but the

So for whatever reason on new devices that we have set up the past couple of months we cannot seem to connect to our VPN at all on these new devices. However, the older devices seemingly have no issue.  We have tried reinstalling the C++ libraries, reinstalling FortiClient, and updating the NIC driver but have had no luck.  All of these new devices are running Windows 11 Pro 24H2 and its a mix of 2 Dell Latitude laptops and one Microsoft Surface Pro 9 if that helps with anything.  Also tried looking for some of the older versions on the support page but we don't have the firewall tied to our account so it doesn't let us search through the download page.  I have tried version 5.4.3.0870 of FortiClient that we had saved but that didn't work either although I am not sure if that version is Windows 11 compatible or not.  Not sure where to go from here any help is appreciated!

Hi everyone,I’m trying to understand whether there is a way to log some TLS/SSL handshake information when using an SSL/SSH profile configured with Certificate Inspection, rather than Full/Deep Inspection.I tested the following settings:set ssl-handshake-log enableset ssl-server-cert-log enableset ssl-negotiation-log enablebut, from my tests, these logs seem to be generated only when the SSL/SSH profile is configured for Full/Deep Inspection.What I would specifically like to retrieve, even when using Certificate Inspection, is information such as:the SNI (Server Name Indication) sent by the client; the negotiated TLS version; ideally, other basic TLS handshake metadata that FortiGate can observe without decrypting the session.Since SNI and TLS version are available during the handshake and do not necessarily require payload decryption, it would be very useful to have them available in the traffic/SSL logs also with Certificate Inspection.Thanks in advance for any suggestions or clarifi

Hi, I need to ask regarding default configuration for FortiClient EMS. In FortiClient EMS 7.2.12 did the “Let EMS schedule automatic upgrade” option under menu System Settings > EMS Settings is enabled by default?I don’t think that I explicitly enabled this option, but I received notification EMS upgrade is available and the scheduled upgrade also has been set.From the following documentation, there is no information that automatic upgrade option is enabled by default.https://docs.fortinet.com/document/forticlient/7.2.13/ems-administration-guide/371397

Hello,I have a FortiGate with two WAN connections, and I am trying to establish two separate site-to-site IPsec tunnels to the same 3rd-party firewall.The design as below;Currently, I have the following issue:IPsec Tunnel 1 over WAN-A → Established IPsec Tunnel 2 over WAN-B → Not Established The same remote peer IP is used for both tunnels.My questions are:Is this design supported without any conflict when using two different WAN interfaces? Is there anything specific I need to configure on FortiGate when both tunnels use the same remote peer IP? Since Tunnel 1 is working but Tunnel 2 is not, what should I check first? Could this be caused by the ISP blocking IPsec/IKE traffic, especially UDP/500 or UDP/4500? What is the best way to verify whether the WAN-B ISP is blocking the IPsec traffic?I have already checked the FortiGate side and would appreciate any advice on what else I should investigate.Thank you.