Support Forum

SAML based SSO VPN is not working

I have setup fortinet DPI but im getting untrusted cert error

How can I setup SWG on fortisase

helloI need to restrict Any Desk Or TeamViewerI need to connect only from UAE if anyone try to connect from outside UAE he can notthanks

Hi, When is not possible to have an Windows NPS for corporate VLAN authentication, Winbind can be a good solution? Thanks. Regards

We currently use Geoblocking to block access to external web servers from "unfriendly countries."  This works quite well.  However, we still receive a lot of malicious attacks from IPs from "friendly countries."  The majority of these IPs originate from private VPN providers.  Is there a way to block access from these IPs?  Thanks.

When registering with zero trust fabric. I enter the invitation code and I receive the Error:FCT version is not supported.Client works on OSX and IOS with the same Invitation code.forticlient version 7.4.1.1736 help.

Hi Guys, I am using Fortigate SFP module on Fortigate firewall & using brocade & extreme SFP module on switch. but the port is not coming up. Is there any compatibility issue with extreme & brocade SFP module ? Attached are the snapshots.Fortigate SFP ModuleExtreme & Brocade SFP Module  

Hello, In Fortinac I´m trying to add an Fortinet Fabric. I already added the Fortigate, but to add the fortiswitches do I need to have an valid Fortilink subnet (exemple 192.168.10.X)? I need to configure SNMP in the fortiswitch too? Thanks in advance 

Can anyone else verify that Apple iOS 18.2 breaks the Forticlient IPSec and SSL VPN? Thanks

Hi, We work with FortiClient VPN 7.4.0.1658 with one predefined SSL-VPN Gateway to an external Partner (User and Password, no Client Certificate, Port 18443) on Windows Server 2016 VMWare ESXi.The connection is established after confirming the "Server Certificate Warning" for FGVM2VTM23001833 fortinet-subca2001. After updating FortiClient VPN to 7.4.1.1736 the "Server Certificate Warning" is no longer prompting and no  connection possible. On a reference client outside my company network it works.Exporting the certificate there and importing it on the Server does'nt change.After downgrading FortiClient VPN to the previous version on the Server the connection works fine again. Any idea ? Thanks,Roland   

I noticed that on FortiProxy, the VM platform version is displayed as FortProxy-VM64. However, when I check the Firmware Download images, I don't see any image labeled VM64; I only see a VMware image. My question is: Is the VMware image the same as the VM64 image? For FortiGate, I see separate images, but for FortiProxy, there is no specific VM64 image.Can you please advise if the VM64 image displayed is the same as the VMware image available in the Downloads section on support.fortinet.com?

Hello, I was wondering if anyone could clarify what the different interfaces displayed with the command "diagnose netlink interface list" actually mean when used on a fortiswitch operating in standalone mode. I did not see the command listed in the official CLI documentation  for Fortiswitch running 7.2.7 firmware. The device I'm testing this on is a Fortiswitch Rugged 112D-PoE running firmware 7.2.8 . Here's a snippet of the command output, 112D-PoESW1 # diagnose netlink interface listif=lo family=00 type=772 index=1 mtu=16436 link=0 master=0flags=up loopback runif=mux0 family=00 type=1 index=2 mtu=1500 link=0 master=0flags=broadcast multicastif=p0 family=00 type=1 index=3 mtu=1500 link=0 master=0flags=up broadcast run promsic multicastif=sp1 family=00 type=1 index=4 mtu=1500 link=0 master=0flags=up broadcast runif=__port__1 family=00 type=1 index=1001 mtu=1500 link=0 master=0flags=up broadcast run multicastif=p1 family=00 type=1 index=5 mtu=1500 lin

The detailed information is: You are not allowed to access this resource because the SAML request from your service provider (https://192.168.199.60:10443) has expired. Please try to access your service provider page again.

Hello dear community,A brief introduction since I’m new here.I am an IT employee at a company, and over the years, we have been using a Sophos firewall. However, we are now switching all our branch offices to Fortinet.I also successfully completed the FortiGate Administrator training at the beginning of this transition.We started with our smallest branch and implemented the simplest rule set. So far, everything seems to work well—we have configured an IPsec VPN connection to our headquarters. At the headquarters, we still have a Sophos UTM 230 SG running. The VPN tunnel is established, and the ping is clean and fast at approximately 30 ms with a TTL of 254.Our issue is that accessing the web interface over the VPN tunnel is nearly impossible. The login still works, but then a white page appears. If you’re lucky, content might load after a while. However, if you click on a menu item, the web interface freezes again.At the branch office, we have a FortiGate 60F. The system load is low.Wh

hello teamWe are initiating a new project to deploy FortiSandbox, and we have a few questions regarding its operation and features. Could you kindly provide insights on the following:How does FortiSandbox operate to achieve real-time blocking of malicious files?What is FortiSandbox's approach to threat protection?Could you explain the key malware detection components included in FortiSandbox?How does the blocking policy function?What is the estimated time for a client's request containing files to go through FortiSandbox's full scanning process and reach the backend server?Looking forward to your guidance.

HelloToday I have FortiAuthenticator when we connect to the Wifi it asks for username and password both on the cell phone, when the user leaves the room and goes to connect again to the Wifi it comes again asking for username and password, would there be any way to put or period or time to wait for this?

I need to connect a Forti AP through a Dell switch I have 2 x fortiswitches with several working AP's, 2x SSID's all fine. I setup a physical port which connects my Dell switch to my Edge switch stack and the fortiAP is online and given the correct DHCP address i setup. But I cannot get DHCP to work on the SSID's of this AP. Do i need to recreate VLANS? as I tried this and nobody could connect on any AP and was giving random 169.xxx addressed. When i try and connect to either SSID on the not working AP - i get a 169 address. I need it to see the VLANS on the fortlink - but dont know how to do this or if it can? thats why i think i need to recreate them? Thanks

We are trying to create a rule in FortiSIEM to detect the absence of a specific type of log being received from a device. For example, if a log source is configured to send PING, Sysmon, and Syslog logs to FortiSIEM, we need to create a rule that triggers an alert only when Syslog logs are missing from that device, even though other log types (e.g., PING, Sysmon) may still be received.The default "No logs from a device" rule in FortiSIEM triggers alerts if all logs stop coming from the device, which does not meet our requirement to monitor the absence of a specific log type.Has anyone implemented a rule or workaround to address this scenario? Any guidance or suggestions would be greatly appreciated! 

Hello,we have, from many years, a WiFi infrastructure composed from two FortiWLC-50D configured in Cluster Mode with nplus1 mode.From last few months we have issue with Zebra Android RF Terminals, that show a popup when connected to AP: limited connectionAlso if the Terminal is under the AP, we have many connection issue, or the connection falls out or the telnet application gets stuck.Firmware version of our Controller and APs are  8.1-3-2.I've tried to reboot the controller but didn't solve.Any suggestion, please?

hi Peeps please help Fortimanager vm and fortigate vm version : 7.0.1 I just installed the two vms and linked them but when I tried to install the policy, it keeps failing with "Input is not a valid CA certificate" I deleted the root_ca2 from the CLI configuration, under device manager, but when I try to install policy again it tries again to install the CA and it fails and when I check if the CA was really deleted or not I found that it has reappeared. I did not find CLI configuration under Policy&package to uninstall the CA from there too. please help       

Hello, I have Fortinet 60 F device. An error showed up while trying to connect via SSLVpn that too many bad login attempts.-455 . When I check firewall failed authentication parts I saw that there are a lot of attempts to login. I am adding the screenshot. What can I do as an emergency solution? Thanks in advance.   

Hi,My Apple device running iOS 15.6.1 is failing to connect to FortiClient VPN. In Android and Windows OS, the FortiClient VPN connection is normal.IOS 15.6.1 ( FortiClient 7.4.2.0151) – Not work * No popup for enter the username and passwordIOS 18.1 ( FortiClient 7.4.2.0151) - OK Does anyone know if there is any compatibility issue between FortiClient 7.4.2.0151 and devices running iOS 15.6.1?  Remark: The related FortiGate firewall is running v7.2.5.

Hi there, having an issue getting to certain websites.  Profile is very simple... lan-wan, all, all, always, nat enabled, only security profile is ssl "certificate-inspection".  No content filtering, dns, antivirus, ips etc.  Regardless of the browser, we get your connection is not private.  NET::ERR_CERT_COMMON_NAME_INVALID.  Try to import the fortinet certs into the trusted root authority but error still persists.  Tried both flow and proxy based inspection.  Any thoughts?

Hi, I just want to know this in generic, I know it depends on environment of each network But is there a top recommended FGT firmware version that would be stable.in My environment we are upgrading to 7.0.16