Support Forum

Dear Team, we are facing issue to access viber application from client and we have configured sdwan and applied polcy for this . but it not working . please suggest how we can bypass the traffic . thanks Umesh

I'm trying to deploy a Fortiextender 311F (7.4.6) on LAN managed mode with an Fortigate 100F(7.0.14). I follow this kb with a few differences and works perfect at the begining but i found a problem. The difference was on the configuration of the extender interface on Fortigate side, I turned on the DHCP Server, to make the devices connected on remote side takes an spcifict scope. This work fine if the remote device is connected once the connection between the extender and fortigate was established. If the remote devices is connected before the connection is established (FEX<->FG), the externder assing an IP of the default DHCP Server configured on de lan switch (192.168.200.0/24) and when finaly the FEX will connect with de gate, the device not renew his IP with de properly IP configured on the Gate becase the local link never lose. This problem detected by rebooting the extender (simulating a power off), since the connection with the gate takes a little (2 -

We have FortiClient EMS on version v7.2.4 with 750 FortiClient EPP licenses. The product is tightly integrated into our Fortinet Security Fabric and connected to AD. Everything works relatively well and serve the purpose. FortiClilent EMS v7.4.0 is the whole new beast; migration process from Windows-based EMS to Linux-based seems to be overly complicated. I am wondering, is it worth an effort migrating to v7.4.0? Or, perhaps, better wait, and upgrade it to v7.2.5 for now? Did anyone went through EMS migration to v7.4.0?VA Thank you for any feedback,

Hi All,Please can anyone provide assist whereby im unable to block Monkey.app on mobile devices. im unable to pick it up on app control. any alternations. i did block on web filter which works perfect. just need to block on devices?

Hi i would like to know if fortiXDR can protect against apc or is some device in fortigate than can protect agains apc ? 

I have a Fortigate 231f access point device. I have 500 mbps internet. When I test with 2.4 ghz near the access point device, I can't get over 80 mbps. What could be the reason for this?

Hi folks,I am sure this is a very simple to solve problem, but we are unable to find, where to set the correct timzone of our 360 Degree Activities Report on our FGT80F. The FGT80F itself is correctly configured (timezone), but we are getting our reports with US/Arzizona timezone, which is not the timezone we have (Europe/Berlin would be the right one). What are we doing wrong? Perhaps you can tell me, what we have to do, to set it up with the correct timezone. Thank you very much.. Atm its looking like that (wrong timezone) 

Hi,This is a question of using Fortigate in the context of allowing in SIP traffic.But then getting the firewall to dynamically open and close pinhole ports for RTP under AWSTo try and explain our setup first we have an AWS EC2 instance that ether receives phone calls or makes outgoing phone calls to a VoIP provider on the internet.As part of this we want to make the setup PCI compliant and with PCI compliance ideally you don't want to just leave a bunch of ports open for outbound RTP all the time.There is one problem though in that any traffic coming into an elastic / external IP under AWS is automatically statically 1:1 NAT'd to the internal IP after it arrives.This creates something of a mismatch between the destination IP inside the Sip packet and the UDP destination IP address.The end result of what we've tried so far:SIP traffic on port 5060 arrives at AWS on ElasticIP1AWS then automatically translates the destination IP for the packet from ElasticIP1 to InternalIP1Traffic is rou

I have disabled my Fortinet Firewall's public IP to be accessed from outside the network. I want to allow the public firewall IP to be accessed from the internal network.

We are doing some phone changes with our ISP. We need to know if PVC-100DB supports both POTS and SIP simultaneously? Or will we need to toggle between the 2 modes?

Hi Everyone,unfortunately I have some issues with FortiClient 7.4. It freezes during "connecting" and nothing more happens. For my colleague it works with the version 7.2.4. So could someone please provide me with this Installer?Thanks and kind regardsJan

I have a FortiSwitch 108E-FPOE.  Its bran new.  I have a RJ-45 to USB Console cord.  I've tested the cord and it works great on my FortiGate 60e.  When I connect it to the switch (I use PUTTY, it doesn't error when I connect), I hit enter and nothing happens.  I reboot it while its connected and I get characters like this "$Y▒▒y▒▒Z▒▒[", instead of any boot messages.  I have already updated its firmware and it's running v6.4.1,build0411,200409 (GA).  I (unfortunately) did not check the console connection before the firmware update. After updating the firmware through the IP, I tried to set it up as a Managed FortiSwitch.  Ss soon as I setup the FortiLink Interface, it was never heard from again.  I waited for several hours but it never connected to the forigate, I was never assigned an IP from it, through any of it's ports; I couldn't assign an IP to myself and get in through the default IP or through the subnet created from th

We have a Fortigate FWWe have a Forinet AP which we have setup with domain and guest WIFIThe AP WIFI is on a different IP rangeThe device connects to the staff WIFI and the domain can be seen all network drives etc.I am unable to connect to this device via Ultra VNC from our other devices on the LAN - which we will need to be able to do.I went through looking at creating a VIP and attempting to set a policy and using that as the destination but from what I have read this cannot be done anymore in forti OS I am struggling so if anyone could assist? Thanks

Hi All,I am new to this forum, I am trying to setup VPN connection between Nokia 7750 SR router to FortiClient VPN,below are the config settings. Please note:- This issue happen only Option DHCP is selected, the VPN tunnel comes up correctly when manual IP is selected. Forti VPN Client:-Authentication Method:- Preshared KeyEAP is disabledIKE version - 2Options :- DHCPPHASE-1Encryption:-  DES Authentication :- DESEncryption:-  DES Authentication :- DESDH Group:- 1key Life:- 86400No Local IDNo DPDNo NATNo Enable Local LAN Phase2 :- Encryption:-  DES Authentication :- DESEncryption:-  DES Authentication :- DESKey Life:- 43200No Relay DetectionNo PFS 7750 Router is config as IKEv2 with all the config matching to FortiClient VPN. For DHCP option router is dumping below messages. failed because ipsec-gw has local-address-assignment configuration but IKE_AUTH did not contain a config payload." Please find the attached screen shot of all t

HI,I need help where I can download firmware for the 140D POE model, thanks for the help

Hi guys, We have a requirement to have a very minimum traffic loss failover in our environment for an broadcast audio system. We have two Hub sites running ADVPN and multiple spoke sites running ADVPN + iBGP.We have chosen lowest cost SLA as the criteria so that the best link is chosen based on latency.These are the settings for the health check and service rules on the spoke side. config health-checkedit "HUB1_HC"set server "172.30.255.253"set update-cascade-interface disableset update-static-route disableset sla-fail-log-period 10set sla-pass-log-period 10set members 6 4 5 10config slaedit 1set link-cost-factor latency packet-lossset latency-threshold 500set packetloss-threshold 10nextend config serviceedit 3set name "DC_RULE"set mode slaset dst "DC_Network"set src "all"config slaedit "HUB1_HC"set id 1nextendset priority-members 4 5 6 10nextend The latency between the spoke and Hub is between 50ms and 100ms. Default iBGP settings are used. For testi

Dear Admin, I would like to change my name to Wittig Thanks.

We currently have a pair of FortiGates that would need configured for IPSEC Remote Access VPN.We have 2 separate ISP connections and active route is driven by BGP.Can you please advise what is best practice to configure HA for remote VPN clients and how can it be achieved?Currently, I have 2 separate VPNs off the firewall links configured by adding Secondary IP to the links.However I want the user to connect to a single VPN and dynamically connect to active one.We use VDOMs and current version is 7.2.If we do create a loopback, using the floating IP --> 100.100.100.100, which the ISP links secondary IP pointing to 100.100.100.101 and 100.100.100.102.Thanks 

I recently took the examination NSE4 FortiOS (today), and as per the instructions, I was expecting to receive the results immediately upon completion of the exam. However, I have not received any notification or confirmation regarding my results on Pearson vu platform and the exam status stills shows in progress .....During the exam I couldn't submit at the end as the time was up. I would like to know if the exam is automatically validated after the allocated time has elapsed, or if there is a separate procedure for receiving the results in this case

The FG-120G datasheet shows that its virtual domain has a default of 10 and a maximum of 10. It is possible to increase the virtual domain from 10 to higher?  

Hi guys, I am deciding to go for a cert but confused which one. I have always worked on Fortinet products. Never worked on Cisco routers and switches or any other vendor.I did went through a CCNA training then I got myself into a company where they only have Fortinet projects. So , question is should I go for CCNA or FCP(Formerly NSE4 ) ? or both ? Is CCNA even a good cert for me ? Currently I have 1 and half year of experience.

Hi all, Please find attached diagram where isp terminated on cisco router and interconnected links between router and fortinet configure with private ip address.  Furthermore will configure secondary ip [one of public ip] on fortinet same port which is connected to cisco router. Basically need to now how can i  configure site to site tunnel, explicit proxy and internet facing rule using that interfaces. 

Reset button on front doesn’t appear to be doing anything. Flashes really quickly on front.I can’t find my console cable either :’(

Fortigate 60D(v6.0.13) and FortiAnalyzer(v7.2.5) I'm having strange issue, Fortigate dashboard show two admins logged in - Admin (with my workstation ip ) and Admin (127.0.01). FortiAnalyzer system events for FGT60D show the following. Every hour there is a successful login.14:57:45 Administrator admin timed out on https(127.0.0.1) 14:47:46 Administrator admin logged in successfully from https(127.0.0.1) 13:57:22 Administrator admin timed out on https(127.0.0.1) 13:48:19 Administrator admin logged in successfully from https(127.0.0.1)   I have other devices with older and newer firmware, not seeing this issue for other devices, including 60D with older firmware. Any idea what is causing this and how to resolve this ?. Thanks.

I cannot locate any information on vlans in the Fortigate 100F datasheet. How many vlans 100F supports. Please assist in locating the solution.