Support Forum

So i've recently acquired two FortiAP-221c's with POE injectors and I am having a little bit of trouble finding out what seems to be simple information. Maybe one of you can help me out. If I were to put one (or both) of these AP's in my home, what would I NEED to make them work. Is a Fortigate required because of the built in Wireless controller? I know they need to be authorized to enable the antennas, is a fortigate or VM software the only options I have?

I have a FortiWeb that is used for our QA environment that is not exposed to the internet.   I need to be able to manage certificates on it automatically to avoid having to manually replace them every month as the lifecycle shortens.   DNS-01 is completely manual so that's out.   I tried HTTP-01 using an internal private ACME server, but the Fortiweb rejects the certificate when making the https request to the ACME server because it is signed by our internal CA. Does anyone have a method they are happy with for managing certificates in this situation?

Hello, I have a 40F.Default config has a virtual hardware switch called "lan" whose member interfaces are: "lan1", "lan2" and "lan3".I would like to remove those member interfaces from the "lan" switch using Ansible. Do you know how to do that ? https://docs.ansible.com/ansible/latest/collections/fortinet/fortios/fortios_system_virtual_switch_module.html#examples I tried the tasks bellow, leaving the port empty, but no success.If I specify just one port, like lan1, it removes the others. I need to remove them all. task1- name: Remove member interfaces from "lan" virtual hardware switch  fortinet.fortios.fortios_system_virtual_switch:    vdom: "{{ vdom }}"    state: "present"    system_virtual_switch:        name: "lan"        port: task2- name: Remove member interfaces from "lan" virtual hardware switch  fortinet.fortios.fortios_system_virtual_switch:    vdom: "{{ vdo

Hi Everybody,I just installed a new Forti Client EMS 7.4.6 installation with a trial license on VMWare.EMS is nicely setup, using a signed cert etc.Now when trying to make a installer package i'm unable to do that.According to the documentation and EMS training I should be able to select between "Create installer " and "Create installer config" but don't get that option.It just let's me go through the creat installer wizard and at teh end I just can do a "download".Is it something i'm doing wrong or is it some bug/feature on a newly released version (released at 17-3-2026) as usual with FortiNet? referenced documentation was the ems 7.4 training and the EMS 7.4.6 quickstart guide: https://docs.fortinet.com/document/forticlient/7.4.6/ems-quickstart-guide/942839 Kind regardsRoger Beurskens

I have performed multiple FortiEMS upgrades over the past year,s tarting from 6.4.7, and the FortiEMS server version was always the same as the Forticlient installer package version.That is not the case with 7.4.7. The installer package version is 7.4.6.I find that confusing..Is an installer package 7.4.7 in the works?

Hello,following yesterday’s application of the EMS 7.4.6 patch on the VM (https://docs.fortinet.com/document/forticlient/7.4.6/ems-release-notes/832484), we have identified today that the majority of PCs/laptops with FortiClient versions 7.4.5 and 7.4.6 are experiencing an issue where the FortiClient Network Access Control process is utilizing 100% of the disk. Before applying the CVE patch, we did not observe this issue.A simple restart of the affected PCs did not resolve the problem. We also attempted to restart EMS, but the issue persisted. On the endpoints we are only using Telemetry, Vulnerability Scan, and VPN access.As a workaround, we tested disconnecting telemetry, generating a new invitation, and reconnecting telemetry — after which the disk utilization returned to normal.Are others experiencing similar issues?Jirka

I have a FortiExtender (FEX) connected to my Fortinet FortiGate, with no other LAN or Internet connections, and in that scenario the device connects to FortiManager Cloud without any issue.However, when I connect the MPLS links (used for LAN/Internet), the FortiGate is no longer shown as connected to FortiManager Cloud.I already created:A static route An SD-WAN/static rule forcing FortiManager Cloud traffic to use the FEXBut the issue remains.Tests PerformedOnly FEX connectedping 8.8.8.8 → Works ping fortimanager.forticloud.com → WorksMPLS connectedping using source interface = FEX → FailsQuestionHas anyone seen a similar issue where adding MPLS changes routing/return traffic behavior and breaks connectivity to FortiManager Cloud, even when policy routes/static routes are forcing traffic through the FEX? Any suggestions would be appreciated.

Hi All, I have the following situation: I configured a guest SSID with Disclaimer Only authentication. I would like to configure the session timeout to 3 hour, and the renewal frequency to 1 hour (after the session time out, the user can not authenticate to the ssid until 1 hour). Is it possible to configure that?I tried to configure this field from FortiManager:  captive-portal-auth-timeoutBut it looks like this field doesn't exists on our Fortigate. Environment: Fortigate40F with FortiOs 7.2.2Fortimanager 7.2.1 OSFortiAP 231F 7.2.1 OS Thank you! Best Regards,Istvan

Hello everyone, After update FortiEDR 5.2.8 to 6.1.0.1455 in dc server , there is a problem in  the collector. The collector always off and workaround is disable in console then control panel remove and restart.After restart, the EDR collector continuons. In the internet, the solution is remove this folders:!--scriptorstartfragment-->rmdir /s /q "C:\Program Files\Fortinet"rmdir /s /q "C:\ProgramData\Fortinet"!--scriptorendfragment-->But i can’t. So, there is tools to remove it, the same fcremove ( to forticlient)?

i created IPSec VPN tunnels on VDOMs that do not have a WAN connection on Site A has only one WAN connection assigned to the root VDOM, and an IPSec VPN tunnel should be configured on User and i used this configuration but it didn’t work   

alfasegurosbpopular.com.co/cancelaciones/index.php# This its a phishing Please help yo report thanks 

We are running into an issue where our Fortifone 380s aren't showing any personal contacts. The whole page is blank. We do have other directories which appear, however, any personal contacts do not. You can manually add one to the phone itself, and it still doesn't appear. However, when you then log into your web portal, the contact you created on the phone is there, even though it doesn't appear on the phone itself. Anyone experience this before?

How to pre-fill username field on OAuth Service portal from login_hint parameter in FortiAuthenticator 6.6.2?I have a Keycloak server with the form of user and password with OpenIdConnect service , I want only to use Fortiauthenticator for the OTP with fortitoken, but i dont want the for of user and password in the fortiauth side

I’m using the 3-seat free FortiClient EMS Cloud offering that came with my FortiGate licensing and have run into a strange issue enrolling an iPhone.My Fedora 43 Linux laptop registers successfully to the same EMS Cloud tenant, so the tenant and license appear to be working, at least in general. However, my iPhone will not register and always gives:“Registration Failed, Error: The invitation code is invalid.”What makes this confusing is that the invitation code does not seem to be truly invalid, because every failed iPhone attempt still causes the invitation Use Count to increase in EMS Cloud. At the same time, the failed attempt does not consume a license seat.What I’ve already tried:confirmed I am using the full FortiClient iOS app, not VPN-onlytried multiple invitation typestried existing and newly generated invitation codestried bulk invitationstried QR code onboardingtemporarily disabled Enforce User Verificationsigned out and back into EMS Cloudconfirmed EMS now shows user v

Configuring FortiADC to load balance Citrix gateway servers.  Access works internally but the requirement is for  internet accessible.  The FortiADC has no public exposure - the private vip is being nat'd at the edge firewall.  Reviewed documentation posted at ==>  https://docs.fortinet.com/document/fortiadc/8.0.0/fortiadc-on-citrix-vdi-deployment-guide/365130/reference-network-topology-used-in-the-examples-of-solution-2 The storefront access works as expected but the ica file is not being rewritten once you launch an application.  Any assistance would be appreciated.

A user is trying to install FortiClientVPN, but after the "Downloading image" process completes, the setup wizard does not launch — nothing happens, and the process simply stops. We tested with different installers and on other devices within the same environment, and the installation worked correctly for all other users except this one. Also other apps can be installed with no problem. The Windows Event Logs show the following entry: Nombre de aplicación con errores: FortiClientVPN.exe, versión: 7.4.3.1790, marca de tiempo: 0x67db45bcNombre del módulo con errores: FortiClientVPN.exe, versión: 7.4.3.1790, marca de tiempo: 0x67db45bcCódigo de excepción: 0xc0000409Desplazamiento con errores: 0x00211f5bId. de proceso con errores: 0x3D78Tiempo de inicio de aplicación con errores: 0x1DBDAAA46008787Ruta de aplicación con errores: C:\Users\USER\AppData\Local\Temp\FortiClientVPN.exeRuta de módulo con errores: C:\Users\USER\AppData\Local\Temp\FortiClientVPN.exeId. de informe: 1d8

Hello Fortinet Community,I am currently working on configuring an IPsec Client-to-Site VPN on a FortiGate 1000D running FortiOS 7.4.11, using FortiClient for remote access. Despite multiple attempts and referencing official documentation, I am facing difficulties achieving a fully functional setup, there are ambiguities especially in the difference between remote access ans custom config, it seems like custom config is a full and manual one.I would appreciate it if someone could provide a complete, working configuration example, including both FortiGate and FortiClient configurations.Environment DetailsDevice: FortiGate 1000DFirmware: FortiOS 7.4.11VPN Type: IPsec Client-to-Site ikev2Authentication: Pre-Shared Key (PSK)Client: FortiClient 7.4.3 VPN ONLY (not EMS)Issues EncounteredTunnel may establish intermittently, but traffic does not pass correctly.I suspect there may be additional routing requirements beyond firewall policies.when i add new tunnels , even the authentification block

Hi there,I bought a used fortigate 100E. How can I deregister the previous owner?ThanksG

Hi Team,On my FortiADC, I have configured multiple virtual servers and everything is functioning correctly.However, every time I log in to the GUI, I am redirected to the “Upload License” page. After uploading the license, I can see that all configurations (including virtual servers) are intact and working as expected.This behavior repeats on every login.Has anyone encountered this issue before?Is this a known UI issue, or could there be a misconfiguration or licensing problem on my setup?Thanks in advance.

Hi Team,In a FortiSIEM MSSP environment, I have two collectors (Col1 and Col2) and two organizations (Org1 and Org2).I would like to understand if the following setup is supported:For Org1: Col1 acts as the active collector and Col2 as the standby For Org2: Col2 acts as the active collector and Col1 as the standbyIs this type of cross-active/standby configuration across organizations supported in FortiSIEM?Thanks in advance.

Hi I have a Fortigat 200 (v7.6.6)I have a server WAPT on vlan 10 and I want use it to wake on lan my PC in vlan 20.Unicast WOL is working wakeonlan -i <ip> <mac>But not with broadcast WOL. And WAPT use only broadcast mode for doing that.When I try to wol aPC (10.20.20.1) from wapt server (10.10.10.1) on vlan 10 :# diagnose sniffer packet v10 'dst 10.20.20.255' interfaces=[v10] filters=[dst 10.20.20.255] 3.495703 10.10.10.1.41831 -> 10.20.20.255.7: udp 102 3.495938 10.10.10.1.48121 -> 10.20.20.255.9: udp 102 # diagnose sniffer packet v20 'udp' interfaces=[v20] filters=[udp] I have taken a look herehttps://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-route-Wake-On-Lan-WOL-magic-packet-through/ta-p/198103 but I don't understand if I need to add an entry in arp table for each PC I want to wake up (I have 2000 PC).Or if i need to enable this command config system interface edit <external_interface_name> set broadcast-forward e

Hi FWB adminsAccording to FWB’s CLI ref we can access to traffic logs and attack logs via CLI.https://docs.fortinet.com/document/fortiweb/7.6.6/cli-reference/561209/logThe user is admin and its profile is prof_admin (has all rights).However when the mentioned command seems not available.fwb01 # diag log all startParsing error at 'log'. err=1Command fail. CLI parsing error.Any idea?

Hey Fortinet Community 👋 As you may have seen in the homepage banners, we’re getting close to launching the updated Fortinet Community. If you are seeing this post on April 16th, we are currently running a 2-hour production test.Once the test is complete, we’ll switch back to the current Community. It will remain in read-only mode until we go live on April 21st.During the test: you may see brief changes as we validate the new experience in production. After the test: you’ll be redirected back to the current Community (read-only) while we finish launch preparations.Click here for details on what’s changing and how to report any issues you notice during the test window. Thanks for your patience. We appreciate it!

What are the portal addresses listed in the Sandbox tab (Type: FortiGate Cloud): "Sandbox Settings - Info - URL Threat Detection - Entries"? There are several or a dozen addresses there, but they are unknown to me.

Good day,Trying to install fortigate on ProxMox but unable to do so. I followed the install guide but when the VM is started it gets stuck on formatting disk screen. any help would be great.