Support Forum

Hello, After changing password, I can't login.It always say Authentication failureThanks in advance

I'm testing Fortigate-VM-Evaluation adn EMS Client Trial(Server),Fortigate-VM can't accept certificate of EMS Client.Fortgate-VM:OS Firm 7.2.10EMS:7.0.7build0398Is there any possible mistake to setup for EMS and Fortigate、or perhaps, Evaluation cannot be used.By the way,when I tried phisical-Fortigate-100F with EMS、it worked.Physical-Fortigate-100F could accept certification of EMS.Please help!!

I want to WAN2-port to Dedicated as Ethernet Trunk.Is this possible?Even WAN2-port role is changed to LAN-role,there is no "Dedicated as Ethernet Trunk".I have to choose port1～port6 using by "Dedicated as Ethernet Trunk" ? 

Transfer a backup from fortigate 50e to 60e

How to access to local webserver by domain name via ssl vpn ?

Does the Fortigate 70f come with ICAP support? I want to double check that before I purchase it. There's no mention of ICAP on the data sheet (https://www.fortinet.com/content/dam/fortinet/assets/data-sheets/fortigate-70f-series.pdf) but this feature matrix it *does* have ICAP support: https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/ee1ebc62-b64d-11ef-9411-ae1fcf29f169/SWMTX-761-202412-R1.pdf Thanks!

How can I transfer a FortiAnalyzer-VM license that is on one VM (on a physical machine) to another VM (on another physical machine)?FortiAnalyzer 

Hello,I'm trying to connect with iPhone on a tunnel SSLVPN (with MS SSO configured) and the FortiClient VPN app on device says:"The network connection was lost."The same SSLVPN tunnel works fine from an Android device.How can I resolve ?Regards,Leandro

Am I right in thinking that setting set username-sensitivity enable for a local LDAP user just removes the set username-sensitivity disable line from the user's config? set username-sensitivity enable doesn't persist in the config when I enter it, and I want to be sure I have this right. I assume entering set username-sensitivity enable is the same as entering unset username-sensitivity ?

We have a bunch of branch office fortinets in the field (don't know the model as the MSP rebrands them) running version 6.4 . Each gateway is using wan1 and wan2 in an active/standby mode. is there a way via snmp to see which wan path is currently active? basically we want to find out immediately when the primary goes down (typically fiber or cable) and it fails over to the secondary (cell).  Many thanks.  Jeff

Do we have any free tools or community scripts for running a firewall health check? best practice analyzer?Looking for something besides the built-in security rating or  Forti Analyzer that might be useful to check out? Thanks

Our user need to access one portal for procurement.some times users will encounter issue accessing the URL. error message is ERR_CONNECTION_CLOSED.we have whitelist the URL so that users wun get blockedwhat else we can do to ensure users don't get this error_connection_closed error ? what our users noticed is if they launch another new session using different browser there will be no issue but will get the same error if launch using same browser. 

Fortinet in console get error Fortigate Cloud Not managed at Fabric Connectors. Users don´t navigate through Fortinet. Any idea please? It´s urgently regards  

Hello, I have made a deny policy on the Fortigate 7.4.7 and assigned some FQDNs as source on LAN to WAN communication. However, I realized it doesn't work. When I tried the policy with the IP addresses, it worked as it should. Then, I executed below command where "ABC.Domain.com" is our internal network host's FQDN.   exe ping ABC.Domain.com   Result:   Unable to resolve hostname.   We are using the Fortigate DNS servers as below:   #show system dns config system dns set primary 96.45.45.45 set secondary 96.45.46.46 set protocol dot set server-hostname "globalsdns.fortinet.net" set dns-cache-limit 300 end    Also:   # show system dns-server config system dns-server edit "lan" set mode forward-only set dnsfilter-profile "default" next end    FYI, I'm able to ping the hostnames in my endpoints but not in comman

Dear team, I am experiencing issue while connecting ssl vpn, VPN connection is successfully established but it seems to be remote machine which I am trying to take RDP, getting freez. I am not able to understand where is problem, it may issue with windows machine. I have come here to know anybody facing this type of issue. please let me know. Windows latest security patch may be issue. while taking RDP of remote windows machine. Thanks  

In the GCP environment I set up the VM where I installed the ova file downloaded directly from the Support Fortinet site (see below for example)        After installation I tried logging in with the default credentials both in SSH and from the GUI but I get this error when logging in            Thank everyone in advance!#FortiPortal #GCP

Dear Team, I am looking for workaround as this incident took place when latest windows security patch updated in my windows 11. Issue - Windows latest security patch update causing problem while taking RDP through SSL vpn in fortigate, after successfully established ssl VPN connection through Forti client application. When I try to take RDP of Remote machine. RDP connection gets freeze.  For your information there is much latency from VPN machine to Remote machine. I am looking for solution, may be someone has solution. Thanks,

hi Community, We have a website that goes through our fortiweb with HTTP authentication with AD enable. Is there a possibilities to exclude this authentication rule based on IP Address? thanks

Hello everyone, since Fortigate Firmware Version 7.6.0 (and above) the "Enable IPsec Interface Mode"-Option is missing when creating a new costum VPN Tunnel. On Firmware Version 7.4.7 everything is fine. The checkbox is displayed and can be unchecked.When creating a new policy i can switch the Action to "IPsec" an choose the VPN tunnel: After upgrading the same Fortigate 40F to Version 7.6.0 the "Enable IPsec Interface Mode" is disappeared:Without unchecking this option i can't choose the VPN tunnel in a new policy I already tried to deactivate the "policy-based IPsec VPN" Feature and active it again. It did not work. I also updated the Firmware to 7.6.1 and 7.6.2. On both versions the same problem. Is this a bug or kinda a feature? Best regards from Germany,Florian

Hello,  We have a fortigate 80F. There is a Firewall Policy, which has WebFilter enabled for traffic from LAN to Internet. The problem is that we are trying to access a sftp with IP. I see in the logs that the IP is categorized as Unrated. I created a new Web Rating override and in the URL I've added the IP we are trying to access (The override is to use a different category to allow the access). Obviously the URL field is for URLs, so the IP is still been treated as unrated. To overcome this issue I have created a new Policy rule so the traffic for this specific IP is not using the WebFilter UTM.Is there any way (except making the Unrated category allowed) to overcome this issue?

Hi guys, I have a problem with FortiEMS. I configured everything: group, domain, certificate, deployment, installer... but the client keeps staying on “unmanaged”. What's wrong? instead, if I send the “invitation” the device registers correctly. Please, can you help me? Thanks in advance 

We have created bookmarks on web mode for SSL-VPN on 7.4.5v.There multiple bookmarks which are not opening after entering the credentials on Web mode. But that bookmarks are internally accessible & able to login after connecting to FortiClient.  

I am currently using both SSL and remote IPsec VPNs. The issue is the negligible logs on fortigate.When a user gets disconnected all i see is "status change" in logs, is there anyway to get more info? did the connection drop use to packet loss? user disconnected? etc if not through Fortigate how are people monitoring this in their infra? is there any setup using 3rd party softwares to be able to monitor why and how VPN was disconnected?

Hey friends,We're in a situation where we need to offload the process of token resets from employees getting new phones to another team (support desk) that we're not comfortable giving administrative access to the FAC.  The process requires human intervention for security and access reasons, we can't allow self-service options.  I'm wondering if anyone's figured out a way to simplify this function through the API or other means.  We're hoping for simple, one click type action for re-issuing a fortitoken by a junior admin, after visual confirmation with the end-user. Has anyone faced this challenge before, or maybe most places have a fully fledge secops team that can handle the load? 

Hi AllI have issue one of our Firewalls, All the devices that connected to Firewall cant get an IP address i check the DHCP Server is working and change the port to LAN 2 or LAN3 nothing change with me. Even if i give any device a Static IP its can't access to internet and i got No Internet. The firewall don't have a lot configuration we just do a VPN Tunnel and no VLANs its a Flat Netwrok. #Fortigate