Support Forum

Hi Support and Community,Today scan my site on virus total and I saw it is listed in Fortinet Phishing. We are using Django restful APIs with subdomains i.e. production dot planclear dot comProgrammers have tested the entire code and they said all good. Can you please remove the flag or give us further details so we can ask developers to fix things?Thanks. 

Dear All, am facing the problem on viewing the traffic logs in Fortiweb which is deployed in Azure. Enabled the traffic logs in CLI but still it's not visible, any suggestion pls   

Hi,Application control is enabled. Client is attempting to access a specific URL using HTTP.Browser_Edge, (on non-default port/non-default port blocking is enabled) Running in FortiOS 7.2.8 Is there a way to configurre an override for a specific IP combination while Application Control is enabled?  Apply an override for the destination ip and port combination of  - 4.196.74.81:8030TIA :) 

Hi, Is it possible to use RSA keys for Site to Site IPSEC VPN set up? I am trying to look for KBs but unable to find one.  Thank you!

A Standalone FortiSwitch configured with 3 VLANs and the interfaces to match.Devices on the VLANs can ping each other but they cannot ping anything that must use the default route, stuff outside the 3rd party firewall. If I add a static route to 8.8.8.8 I can ping it. Any ideas why the default route isn't working? config switch vlanedit 1set description "Data"nextedit 2set description "Door-Access"nextedit 3set description "IN-Printers"next edit "Doors"set ip 192.168.2.254 255.255.255.0set allowaccess ping https sshset snmp-index 60set vlanid 52set interface "internal"nextedit "Printers"set ip 192.168.3.254 255.255.255.0set allowaccess ping https sshset snmp-index 61set vlanid 54set interface "internal"nextedit "Data"set ip 192.168.1.254 255.255.255.0set allowaccess ping https sshset snmp-index 63set vlanid 50set interface "internal"next  config router staticedit 1set dst 0.0.0.0 0.0.0.0set gateway 192.168.1.50next 

Hello guys! Im planning updating a few Fortigates from v7.2.6 build1575. I have two of them in HA. I would like to know what are you guys experience with 7.2.10M. Whats the stability and what issues if its the case that you guys are having?

Chrome Extension for VPN blocked by FortiGate 60E with FortiOS 5.6.2We are running a Fortigate 201-F with firmware v7.4.5 build2702 We have a user that occasionally needs to use a VPN (1clickvpn.com). We would prefer to use a Chrome Extension that allows turning the VPN access on/off easily. We have tried different extensions but they seem to be unable to get through the firewall. Oddly, if you use a standalone VPN application instead of a Chrome Extension, it works. Is there something in the application or security policies on the Fortigate that would prevent a VPN via a Chrome Extension?

we are running 7.2.9 on our fortigate and 7.2.4 on our APs this is remote location.any idea what would cause this not to pop up for users. 

Hi, I've been struggling with this one for a couple of weeks now and haven't found a solution. In my lab environment with a single IP address available I was running a 600c perfectly well, but I decided to change to a 200e (v7.6.0 build3401) for the additional functionality. Internally I am running an On-Premise Exchange Server, an ADFS Server for webmail authentication, along with an unrelated website all on separate servers.  I use virtual servers (HTPS) to connect to the appropriate real server based on the host header. e.g. (not real IP addresses) mail.myname.com (100.100.100.1:443) -> Server 1 (192.168.0.1:443)adfs.myname.com (100.100.100.1:443) -> Server 2 (192.168.0.2:443)website.myname.com (100.100.100.1:443) -> Server 3 (192.168.0.3:443) Browsing to the Web Server works perfectly.Browsing directly to the ADFS authentication page (passing appropriate parameters) works perfectly.  Including redirecting back to the mail server after aut

Hi, I noticed that when I establish a BGP session with my peer, Fortinet takes about 30 seconds to send its routes to the peer. The peer instead sends its routes to Fortinet almost instantly after establishing the session. How can I reduce this time?

Hi Team,So I have a case with TAC that is hitting the wall in the last 2 weeks.  I have a client with 800 users , Fortigate and FortiEMS.The main reason that he purchased FortiEMS is to have the users always connected and to be able to control which user can disconnect or not).The problem is that even everything looks just fine, has the proper configuration from all the possible documentations,  the auto-connect is not working! Not to speak about "user EMS: <options><allow_personal_vpns>0</allow_personal_vpns><certs_require_keyspec>0</certs_require_keyspec><on_os_start_connect_has_priority>0</on_os_start_connect_has_priority><keep_running_max_tries>0</keep_running_max_tries><autoconnect_only_when_offnet>0</autoconnect_only_when_offnet><disable_connect_disconnect>1</disable_connect_disconnect><secure_remote_access>1</secure_remote_access><show_vpn_before_logon>0</show_vpn_be

Hello , could someone give me a light I'm configuring F60 , when the WAN1 card is set to receive DHCP modem from the operator it navigates normally , when I put it in Manual it stops navigating , I already went to the modem of the operator I made a DMZ I put the same IP and nothing someone could help me with this

Hello team, This time, a basic question.https://docs.fortinet.com/document/fortigate/7.6.0/administration-guide/369092/enabling-automatic-firmware-upgradesThis article says "updates within the same major release", so I am wondering, what is this "major release".For example, if we want to schedulle an automatic update to afterhours, I will need to know to which version will be updated Thanks in advance.Regards,Damián

I need the installer for Forticlient VPN 7.0.8.0427 (ideally the MSI) for a large-scale uninstallation via Intune. Is there anywhere I can find it? I've seen some posts within this community that contained a link, but they were all expired. 

Hi Folks! Hope you are all doing well, I am new to the firewall role. I would like to ask why I cant see any denied logs related on our block list policy. we have this group for IP address and full qualified domain, we plae any malicious object from this group. but as I checked, It has block other IP address that are not included on the repository. and the IP address that are on the group are not is it because the user are not accessing this IP or I cant see it because of the 7 days log retention. I would appreciate your insights on this Also here is the policy (Version 7.2.8) NameFromToSourceDestinationScheduleServiceActionLogBlock Inbound TrafficanyanyGroup of Malicious IP and FQDN detected from QradarallalwaysALLDENYEnabledBlock Outbound TrafficanyanyallGroup of Malicious IP and FQDN detected from QradaralwaysALLDENYEnabled

Hi guys,I am new to the field of advanced routing. In my company we have the following network construct to a branch office:A dark fibre line connects 2 fortigate firewallsAn LTE line is to be used as a backup lineBoth fortis are connected to each other via both lines using IPSecAt the moment the internet traffic goes over the LTE line, but in the future it should work as a backup internet line, but currently the LTE line is the internet access line for all clients in the branch office.If we put a new default route 0.0.0.0/0 on the WAN interface with the dark fibre, both routes go down.How do the two Fortigates have to be configured so that everything runs via the dark fibre and the LTE line is only used if the dark fibre fails?Thank you in advance for your answers. 

Hello, One of my customers asked if FortiNAC-f would support their Dell Powerconnect N5548 switches.I assumed it would be possible with SNMP or just CLI. Back to the subject - is there a publicly available list of supported 3rd party switches or if not is the above model supported and in what capacity. Any answers to this or just pointers to the appropriate materials would be appreciated!

Hello expertsI I have configured FortiClient EMS to apply an endpoint profile system setting to send FortiClient logs to FortiAnalyzer, but no logs are being sent. I confirmed the settings iFortiClient EMS are correct. Below are the relevant local log lines from the fazlogupload.log file from FortiClient. 20241112 07:32:48.841 TZ=-0800 [fazlogupload:INFO] log_upload:183 Uploading traffic logs20241112 07:32:48.841 TZ=-0800 [fazlogupload:INFO] faz_comm:37 Connecting to {redacted}.ca-west-1.fortianalyzer.forticloud.com:514 (TLS: true)20241112 07:32:49.008 TZ=-0800 [fazlogupload:DEBG] faz_comm:92 EMS serial:{redacted}20241112 07:32:49.009 TZ=-0800 [fazlogupload:DEBG] faz_comm:93 EMS site: default20241112 07:32:49.009 TZ=-0800 [fazlogupload:DEBG] faz_comm:94 FCT serial:{redacted}20241112 07:32:49.010 TZ=-0800 [fazlogupload:DEBG] faz_comm:95 FCT UID: {redacted}20241112 07:32:49.010 TZ=-0800 [fazlogupload:DEBG] faz_comm:96 Log type: traffic20241112 07:32:49.010 TZ=-0800 [fazlog

Hello we a have installed a public certificate on our captive portal . when a machine is connected its initial  location is the isolation vlan as per design.  Cert looks to be installed correctly but we are still getting SSL Certificate error upon initial browser launch .   Do we need to modify the firewall rule for isolation vlan? do we need to allow outbound internet access to the certificate authority ? What are people doing in this scenario.  Running FortiNAC-f 7.4 Thanks, 

Dear Team, Can you provide me please with documentation showing how many WEB applications can be protected on the Fortiweb? Thank you,Elsy

Is there a way to set up Port Knocking on 7.4.x

I recently added a cellular internet back up service to our Fotigate. For the last 2 or 3 weeks I have recieved over 1000 "Login Denied" email alerts. I would like to block all public ip addresses but I have not found a good step by step using the web interface (I don't use CLI). Can someone point me in the right direction?I have a Fortigate FG60F with version 7.0.16 build0667. I cuurently have the backup internet unplugged.

I’m working with an Acoustic customer who wants to give me access to their development sites using their VPN. They use Fortinet and we had a call to walk me through installing it on MacOS on my laptop. Installation worked fine, but I can’t actually use the client, because after entering credentials I’m prompted to modify the MacOS Privacy & Security settings (see screenshot). When I open the Settings window the usual prompt to allow software from this developer is not there, so I can’t approve it (see screenshot).

I' m curious if anyone has run into this problem and if so, what have they done to fix it? (v4 MR3 P8) I have FSSO configured and it has been working properly now for several years. However, in the last few years more and more wireless connections are being made available to our users. We have implemented group policy to configure our wireless adapters to authenticate users using 802.1x and PEAP to allow authenticated users access directly onto our corporate wireless network and keeping guest users separate. The problem we have is that with this setup, users frequently use both wireless and wired connections simultaneously as they generally forget to disable their wireless connections. This seems to present a problem with FSSO. It seems (this is a bit of an educated guess) that when a user authenticates they may source from either the wireless or the wired connection resulting in a event log entry that is monitored by the collector agent. However, sometimes when a user la

Our FMG and FGTs are all running 7.2.8, and several months ago we upgraded the security fabric across all our devices. Now, we have a problem to where our local-in-policy will deploy once from the FortiManager, and the next change we deploy deletes the configuration that as just installed. We're trying to enable BGP to a vendor for one of our new systems over one of the VPN tunnels, but BGP is being listened to on the outside interface. I blocked tcp/179 using the local-in-policy on the outside interface, but then had to make another change after that. It's now unblocked. We have 18 FortiGates, and all have various local-in-policy configurations, but we can't make any further changes. Can someone provide guidance on what we need to do? Thank you.