Support Forum

I have had two recent incidents where after installing the FortiClient VPN client, one on Windows and one on Ubuntu, where after entering the necessary IP address, port, username, and password the pop up window to accept the certificate never shows. Is there a way to get the cert from the Fortigate and manually install this or somehow force this pop up window to appear?

Hi All, Wondering if anyone else has had this issue or could advise? There are lots of User 802.1x Authentication Failure's in our event log with the Four Way Handshake Timeout error - Is there any recommendations to try and resolve this? Thank you!

Hey all, I have FortiGate 80E firewall (v7.0.7 build0367) with DHCP range 192.168.9.100-192.168.8.250 I'd like to add 25 slots to that range by increasing the starting range from 192.168.9.100 to 192.168.9.75). My question: Can I make this DHCP change in real time? Or will it affect DHCP users, static IP users, VPN users, and my access to the local FortiGate portal?

Good morning, I have a question about what is the best way to update/register a Fortigate 40F behind another Fortigate? There is a big rollout coming up, we want to replace all of our Fortigate 40C with Fortigate 40F and I would like to send the fortigates up to date and registered. We have a lot of small branches and usually we configure new Fortis at our main location just to get them online after they arrive at one branch. Then we register and update the Fortigate, this obviously causes an internet loss.I’m kinda shure that there is a better way, but I can’t figure out how to do it. First I tried to update the firmware manually. But after one successful update I receive this Error-Message:This is a FortiOS v7.6.0-build3401 firmware image that cannot be installed because the device's FortiGuard license for firmware upgrades could not be verified or may have expired. Verify or renew the license to install upgrades.If I understand that correctly the Fortigate needs internet a

I've recently acquired an old (out of support) 60F to "play around with" at home and learn its interface. One issue I've run into that I cannot seem to figure out is how to host a Factorio server. From their wiki they list the following:All game instances need the installation of exactly the same game-versions and mods.Factorio servers use port 34197. The port can be changed in the config file.Factorio uses UDP only. The game builds its own "reliable delivery" layer built on UDP to deal with packet loss and reordering issues.Make sure you configure your router's port forwarding correctly for port 34197.Make sure your router does not randomize the source port on packets outbound from 34197. Some routers do this and require additional configuration to prevent it.Make sure there is no firewall or anti-virus blocking the UDP-packets.It is the not randomized source port that I cannot seem to figure out. To me what makes s

hello,I have a vmware lab and I would try fortigate in vm.I had download the vm image but I saw is limited to 3 interfaces.all interfaces are physical and I can't create vlan is it normal?do you have a solution to create somes others interfaces

Hi All, We are using FSSO to monitor user web activity. We are using the DC Agent to collect logged in users. However, I am seeing on my Domain Controllers, Event 4776 which seems to show that FSSO is still using NTLM. I have NTLM disabled on my policies as well.Does anyone know why event 4776 is being generated by FSSO?Source workstation is the server FSSO is installed on. This event is on the DC. Thanks. I

Hi everyone, Currently testing the Foticlient EMS ztna in trial,I wanted to integrate it with our fortigate 80F on which the SSL VPN is configured for remote access of users on the herberger applications on our multi-application server which contains several application (x,y,z),my need is to integrate ztna with ssl vpn for more granular access control, i.e. authorize a user to only access application x on the server and nothing else, anyone has an idea about this configuration because what I configured doesn't work    

HI, im trying to create samba server in DMZ zone when im transfering files from lan to dmz it transfer in 5  or 6 mbps speed . but when i tried withi lan zone it is happaning in 300 to 400 mbps. can any one please suggest how to optimize speed between LAN and DMZ

Is it possible to hide this window? I'm not seeing it in EMS portal. 

60e - 6.0.4 This is driving me insane. I'm continuously being logged out of the gui. Sometimes its so quick I can't even select "Login Read-Write" and sometimes its the first menu I click on. Other times its after 5 minutes of continuous activity. Doesn't matter if I use a local account or a remote account. Same randomness. Its logging me out "successfully" each time.  Login timeout is set to 60 seconds (need time for duo). Inactivity is set to 10 minutes. I'll happily provided any logs/config if someone could point me in the right direction. Thanks 

Hello everyone, I am running a Fortigate with FortiOS v7.4.5, where the default VLAN traffic arrives untagged on the LAN interface. Currently, several networks (e.g., 10.0.1.0/24 and 10.0.2.0/24) are operating over this interface.After assigning a secondary IP address to the interface (10.0.1.3/24), routing between the two subnets works as expected. However, the security policies configured between these networks are not being enforced. I have reviewed some relevant articles, but the suggested solutions do not seem to resolve the issue. According to these Fortinet Technical Tips, the traffic should be blocked by default and then allowed through the appropriate policies:Allow traffic between different subnets with the same VLANHow to allow traffic when using the same logical interfaceI have tested this in a lab environment, and as expected, the traffic between the subnets is routed, but the configured security policies are not being applied. Is this behavior expected? Are

Dear all, I'm new to FortiEMS. I have done the fresh installment as a VM using the trial license. Our current architecture is: FortiGate + FortiAuthenticator. The user are connecting to VPN (SSL-VPN) using FortiGate + FortiClient and FortiAuthenticator as a MFA. We want also to add FortiEMS as a layer to do a posture check for the device prior of giving them permissions to connect remotely to the company resources. We have users with a company joined AD laptop + BYOD devices. I'm trying to understand: 1- Where will the FortiEMS stand in the "big picture" at the architecture level ? Will it replace any of the components ?2- Do i need to connect FortiEMS with FortiGate ? If yes, will i have any impact since i do not have a test env and FortiGate is directly in production.3- Do i need anymore the FortiAuthenticator ?  Thank You in advance #FortiEMS 

Hi everyone : my wifi with WPA2 Enterprise setting can't connect since last week when I typing account & password，it will show up make me typing account again ( account is correct ) here is setting picture ( wifi typing、ssid setting、radius setting ) 

Hi!In the past, it was possible to connect from Fortimanager to fortigate via "ssh" session also in backup mode (even when the fortigate was behind a NAT device). That "ssh"-session is tunneled inside FGFM connection.In the latest FMG versions, this feature seems to be only available, when Fortigate is managed by Fortimanager.Is there any way to bring this feature back, when operating ADOM in backup mode.I mean this button in System Information box:

There is a ping package loss in the IPsec tunnel.fortinet FGT40F     

Newbie here (sorry)!I have searched through this site and could not find what I'm looking for, and hope you can help. Background:I have a FortiGate 1000D running firmware v5.2.11,build754 (GA) in a K-12 school district with 5,000 students with one-to-one devices.  I also have a VM with FortiAuthenticator. Issue:I would like to configure my FortiGate to the following.When a user logs into their device and opens up a web browser they are presented a login screen.  Once they login and authenticate to my Active Directory, they are then allowed or denied access for a set time frame. Thank you in advance for all your help! Troy

I want to upgrade FortiGate 600F from v7.4.3 build2573 (Feature) to v7.4.5 (Mature). We have several remote clients with window 8.1 Pro to use SSL VPN Connection. All devices are used Forticlient version 7.4.0.1658 Is there any IE internet explorer TLS version issue on window 8.1 pro side for new firmware?   

Hi All, I use v7.4.5 on FortiGate 61E.I operate FortiGate VPN with WAN, so it is confirmed that the Device Detection feature cannot be activated.Is there a way to find out or verify the user's MAC address in this situation? The "Device Manager" menu in the guide was also not found on the operating system. (Guide) Best regards,

Dear Experts, Here is my story for SD-WAN IPsec aggregation.  The 2nd line is disconnected and it is kept (disconnected).Temporarily whole SD-WAN line is disconnected. I understand it.However, recovery takes much time (more than 3-5 minutes).Can we shorten this time? Thanks in advance,

Has anyone seen the issue when upgrading their HA fortiADCs where the secondary ADCs rspools will show down, even though they show as healthy in different tabs?  The primary rspools show as healthy but the secondary do not.  Is there any documentation out there that addresses this issue?

We are getting below error in VPN events .How to solve it??? Please share a quick response and solutions for this?? 

Hello,I have spent some time searching for a solution for this issue and cannot find it anywhere. We recently purchased a bunch of the FortiswitchRugged 112D-POE to replace older switches at our site. This is going to part of a giant network upgrade project. However short term I am using two 112Ds to connect to an existing network. I can connect via CLI and have already changed the IP/netmask (with hope that it would allow the web gui to work). I am looking to log into the web gui to finish a few updates to a few settings. I type in the IP in internet explorer and type in admin for username, I have already changed the password in CLI so I have a password to enter in that field. The login button seems to be disabled and won't let me login. I was wondering if anyone encountered this and has a possible solution. Many thanks!   

I want to see what the current settings are set to, and make the changes in this article "Technical Tip: How to limit SSL VPN login attempts and block duration" via Fortimanager.If I log into the actual box it says it will become out of sync with fortimanager.  Is there a way for me to easily resync it? John B.  

When I connected to my iPhone's hotspot, the FortiClientVPN stays stuck always at 98% during login.My iPhone is at that moment connected to a 4G network here in the Netherlands.What I noticed is the problem is fixed if I disable IPv6 support on my wireless adapter in Windows.See below the logs of the FortiClient VPN (debug level) I am using version 7.0.6 of the FortiClient VPN on Windows 10 21H2, the firewall is running FortiOS 7.0.6 Do more people have this problem?