Support Forum

Hello, is there a way to generally detect emails with Forti Sandbox Viruses in FortiMail logs?

how to upgrade FAC in HA

FORTIMANAGER UPGRADE PROCESS

The customer wants to configure Microsoft Entra ID in FortiClient EMS while using Azure AD Connect to synchronize users. They currently have on-premises Active Directory integrated with EMS for user synchronization. Can both On-Premises AD and Microsoft Entra ID be used simultaneously in FortiEMS, with specific endpoint policies assigned to users from Entra ID and others to users from on-premises AD 

Since upgrading our EMS server to 7.2.5 and our clients to FC 7.2.5, the clients Web Filter, Video Filter, Vulnerability, and System Events no longer populate in EMS at all.  These events don't update under the Endpoint Views for the clients and therefore the Vulnerability Dashboard does not show any information for detected Vulnerabilities either.  If you check the clients, they are definitely logging these events and, they are just no longer being populated in EMS.  I've checked every setting in EMS and on the Client configurations and I can not find out what is breaking this.  I've confirmed that the necessary ports are still open and that there are no filters in place to prevent them from showing in EMS.  The clients are still successfully updating everything else in EMS just not the event info. Anyone else come across this and have a fix?

Hi there, I have FG60D with no license. since this product already end of life support.I want to use this firewall as basic firewall with:1. restrict user from certain port, that only can access internet to exact address.2. use antivirus with installed latest definition3. use as VPN IPSEC between other FG60D or other client. I've tried to make policy, activate antivirus and web filter policy with create custom profile.custom profile has been set:- disable fortigate category based.- activate web url rule, and add some address, with parameter wildcard, allow. and at the bottom rule box, I set * , blocked.- nat on then I try, all client can't access internet, until i disable web filter. kindly please help:1. can we use old fortigate without license for basic firewall, as above?2. why my problem occur, client can't connect internet? thank you-

Hi EMS adminsEMS 7.4.1. I want to change the IP address of the VM.Can I just change it at Linux level? Will EMS work properly after that? Or is any extra change required in EMS config?

HelloIn some cases I noticed the temporary license expires about 5 to 10 days before time. I mean instead of expiring after 60 days it expires after 50 or 55 days.I've seen this behavior two times, one on a FortiWeb an one other on a FortiMail.Did anyone have the same issue?Any idea what can be the cause?

Hello everyone, i working on new job and there is FortiGate 100F (i`am new to fortios) Users pass captive portal authorization for internet access, but Security mode on Lan Interface is disabled,also didn't find anything at config. FortiOS cookbook shows that captive portal configurate at Interfaces, where another places i can find current settings of captive portal? FortiOS 6.2.16 FortiGate #FortiOS 6.2.12

Hello All, Hope you are all doing well, I'm facing an issue today while working on IPSEC on Fortigate VM,  When I try to create a IPSec VPN tunnel using the wizard this error show up " 61: Input not as expected." as a workaround I create it mannuly to avoid this error but on the Phase2 of VPN Tunnel the fortigate keep loading with out saving the configuration ( screen attached ) +The OS info : v7.6.0 build3401+ Config : 2CPU, 2GB RAM Do you have any recommandation on that ? Regards,Karim

I'm having some troble getting some messages over the size of 10MB on my server. I've changed the max message size on the domain, session profile and content profile to 34MB. However, every time that I tried to receive a test email over 10MB on size, the message bounces without any further information and I have no related logs on my Fortimail. Messages under 10MB are received and logged correctly on the monitor secition, I also tried to configure the max message size on the system GUI and through CLI but the GUI option is nowhere to be seen and the "set max-message-size" command is not being recognized either.

Hi,I have an FG61F and have downgraded the firmware from FGT61F-7.2.6-FW-build1575 to FGT_61F-v6-build6188. After the downgrade, I am unable to access the Fortigate GUI page, and no status LED lights up when I connect to the Fortigate port. What should I do to restore the device to Firmware Version 7?  

I configured my FortiGate with the CLI command as below: ---config system adminedit adminset two-factor email--- Does this affect ssh log-in? If so, is there any solution to divide ssh authentication and http authentication? thank you,

I have a FGT61F running 7.4.3 at the home office and another identical in a remote office. Home office has the static IP. We had a long-term power outage over the weekend and once it was restored the tunnel will not come back up. I have rebooted the FGTs and modems on both ends. In logs I see action-negotiate and stats-success on the home office every 30 seconds and delete_phase1_sa on the remote office. I tried to flush the tunnel from both ends and no luck. Any ideas? We have had power failures in the past and never had this issue. Thanks for the help.

     Fortinet is working at my place looks good the equipment is nice. I teeter from one idea to another as I look through the interface. I had to use YouTube to get me through hooking-up the appliance. It works good, I can pause backup and go forward through the videos. Enhanced web and telephone support was necessary to get me logged into the dashboard. I could not reset the devise when advised over the phone. Support told me I did not have and support subscriptions. I mentioned it should go online without a subscription so I was offered to reset my device with a phone call. I could not hear and the call dropped three to four times. It was time to gave it a break for months to realize the reset button has to be hit for a long time to get the device to restart. Support told me this after I purchased the supports subscription for two of my devises. Knowing how to reset the devises made all the difference in the world for setting-up the FortiGate appliance. The login is n

Hi, We are trying to setup to setup another SSL VPN to our FortiGate's.I was wondering if it is possible to have two ssl vpn interface and two public ips?We want to setup two azurer SAML entra ID's for the VPN's.TIA :) 

Until now we’ve used SSL vpn with SAML authentication with Microsofts Entra ID as IDP. However since we want to stop using SSL VPN due to the deprecation, I’m wondering what setup makes most sense when fitting the requirement of entra ID as IDP with SAML. What’s your experience with IPsec for forticlient and with SAML, and how is the deployment? So far we’ve used intune app for a preconfigured forticlient for SSL VPN https://vidmate.onl/ .

Hi I have issue when i already authenticated myself in Captive Portal but I cant connect to the internet. on the browser says error Your connection is not Private; NET: ERR_CERT_COMMON_NAME_INVALID.  but if i disable the captive portal, i can open the internet with no problem.   Could you please advise?

Hi All, Error Message: Connection with License Server Failed I have two subnet configured on my firewall fortigate 60F. SAP B1 was configured on the 172.18.10.x subnet and users are coming from subnet 172.18.10.x.  We can do ping and connect to the server, but we are not able to log in as we get the error message above.  anyone have same problem?

Hi all,I have a Fortigate (7.4.4) with a discovered FortiExtender (7.4.3) in WAN extension mode added to it. From the FortiExtender, I can ping anywhere on the internet. I have a /30 link between it (Port1) and the Fortigate (Port A), and I can ping it's LAN address from the Fortigate, and vise versa.I cannot for the life of me see as to how to get it Online, or as to why it is showing as Offline. On the Fortigate, I have Fabric allowed.  When I do a diag sniffer packet on port 5246, I'm not seeing anything at allAny thoughts or pointers as to where to check next ?

I have this problem with Fortinac. I have a port and computer A is plugged into this port. When computer B is plugged into the same port, both computer A and B appear under the port even though computer A is not plugged in. Even though I deleted computer A, it is still under the port. The device is quarantined because there is more than one device. Fortiswitch can be used.

Hello. Fortigate has versions 7.0.15 Fortiswitch 7.4.2. They are interconnected with Fortlink. My problem is the following. I plug machine A into any port of Fortiswitch. Then I unplug this machine and plug machine B into the port. When I check in Fortigate, both machine A and B appear on the port when only machine B should appear. What is the reason for this?

getting below error on FAC 2024-11-24T17:02:41.605283+05:30 NIC-FAC-MC radiusd[7644]: (25771) facauth: Remote ldap user 'manoj': NULL password is not allowed2024-11-24T17:02:41.605289+05:30 NIC-FAC-MC radiusd[7644]: (25771) facauth: Remote LDAP user authentication failed2024-11-24T17:02:41.605799+05:30 NIC-FAC-MC radiusd[7644]: (25771) facauth: Updated auth log 'manoj': Remote LDAP user authentication(chap) with SMS/email dual token failed: invalid password USER IS remote user AD user and we are using chap on the FGT acting as a client

 Hello everyone, I’m experiencing an issue and would appreciate any suggestions: I’m using Windows 11, but when I run a "Vulnerability Scan," it detects errors related to Windows Server, which is clearly not my operating system. The recommended security patches are already installed via Windows Update. Any advice?P.S.: The "Auto-Patch" option doesn’t resolve the issue either.   

Hello, I have some issues with dns forwarding between to fortigates (601E and 601F) over a site to site VPN tunnel.In general the VPN is working great and there are no connectivity issues at all.Main-Site (FG 601F) has some internal DNS zones with entries and some of them forward to other DNS servers. The DNS service is enabled on all interfaces and each client on main site gets all dns entries of Main-FG as it should.On site B (FG 601E) I tried to create the same DNS zones as on Main site and entered the Tunnel IP of Main-FG as DNS forwarder. If a client on Site B tries to query anything from those zones from FG-B it gets no answer. If the client tries to directly query the Tunnel IP of Main-FG it works, but that's not what I want. Does anyone has an idea what could be wrong? I already experimented with source-ip and stuff but it didn't help. Both Fortigates have FW 7.4. Greetings,daniels7