Support Forum

hi,i have an upcoming change window and just would like to confirm the 'revision' function in FG.1) if i click on configuration > revisions > save, this will create a backup config that is local in the device?2) i use VDOMs, so does the config include the all VDOM? i.e. 'global', 'root' and others?3) how can i view the full content on the revision config? is there a CLI command I could use?4) if i need to revert the config using the CLI, the 'latest' config would be the most bottom revision id? would this be revision 27? (global) # exec revision list configLast Firmware Version: V0.0.0-build000-REL0 ID  TIME                   ADMIN             FIRMWARE VERSION           COMMENT<SNIP>26 2024-02-19 21:54:37 Admin-Full V7.2.x-build1xx-REL0 Automatic backup (session

I installed FortiClient on my own macbook. But when I click the app, the attached error report pops up. I checked that my macbook firewall isn't blocking it. I uninstalled it once and reinstalled it. Restarted the macbook. Still the same error.  The error report is too long so i just captured the first pagemacOS version: Sonoma 14.6.1  

Hi all, we have recently update FGT to FortiOS 7.2.8.We found out a problem during the Re-Install policy.The process returns an error and we must "Retrieve" the configuration to complete the install. We use FortiManager 7.2.5.Can you help us?Regards.

Foritgate FW version : 7.4.4I have created two proxy policy with different schedule, office hour and non office hour.and i notice that the traffic is matched with non office hour schedule and policy when I access internet in office hour. anyone have experience this issue ?  Observed Update on 8/July/2024:Traffic between 4PM to 3 AM will go to office hour policy with schedule 8AM-7PMTraffic between 3AM to 4 PM will go to non office hour policy  with schedule 7PM-8AM      

I want to send data to a SOC. The SOC is using LimaCharlie and they can receive alerts with webhook. On my Fortigate I want to create a trigger for all threats that have the weight "High" or "Critical. I am here:Security Fabric > Automation > Create new * Name: LC High/Critical Threat* Description: Send threats to LimaCharlie over webhook Now when I click "Select Entries" + "Create" I get the following:  Where should I continue in order to find the threats? The webhook URL is b76093c3662d5b4f.hook.limacharlie.io/ORGID/ADAPTER_NAME/PASSWORD    

hello everyone, I have a forti 50e and I have problems with speed and packet loss on the lanIt is very very slow, it should have 499mb download and I have 4mbI have tried everything and nothing, the firmware is the latest and with that neither.thanks

We have 50 E, the Internet is too slow through FG 50E, from the ISP  we are getting the same speed that they are suggesting. Does anybody help to resolve this issue?

Hi All,I have a strange problem with our Fortigate 50E. The router works with a fiber connection, wan interface configured as a VLAN,  PPPoE.Router worked properly about 4 years, including one year with fiber. The max speed was 300Mbps / 70 Mbps (DL/UL)Two months ago I noticed that DL speed decreased to 30Mbps, now its only about 4MbpsI've checked cables, I also connected router of ISP (when ISP's router was connected the speed returned to 300/70)Is there something that shoud I check with my FG50?regards,  

Hi,Il can't use new function for "Integrate interface" in Fortigate 501E (v. 7.2.7)I create a vlan in a physical interface for the test but it isn't possible to user function.View screen :Thank and sorry for my bad english.

Hi, Laptop using Forticlient 7.x VPN on Windows 11Home for a year, so far is OK, recently, I have been unable to access the IPSec VPN from my laptop. Each time I attempt to log in, FortiClient displays the error message 'IPsec VPN connection is down.' When I check the FortiClient log, the last entry reads 'Phase1 retransmit reaches maximum count.'I also tried accessing the IPSec VPN on other branch office FortiGate firewall (model 61F) using FortiClient, but the same error message appeared. LaptopWin11Home, Forticlient 7.x FirewallFortiGate 30E, firmware v5.4xFortiGate 61F, firmware v7.2x Can someone help? Thanks in advance.  Clement  

I don't see the mgmt port in the Management Interface Reservation configuration 

Hello,We've got a problem in our network. When devices are connected to two different access points (Local-WiFi-radio and FortiAP-221E), they can't seem to find each other even though they're on the same SSID. But, if they're connected to the same access point, everything works fine. Devices operate in Tunnel mode.We made sure that the setting which stops devices from talking to each other (client isolation) is turned off on both the access points. Also, we checked that both are set up to work in the same subnet. Still, we're stuck with this issue.We're using a FortiWiFi 40F and a FortiAP 221-E.Problem:ClientA -> FortiAP1 -> FortiGate (FortiWiFI)-> FortiAP2(FortiWiFi) -> ClientB - Ping FailClientA -> FortiAP1 -> FortiGate (FortiWiFI)-> FortiAP1 -> ClientB - Ping SuccessClientA -> FortiAP2(FortiWiFi) -> FortiGate (FortiWiFI) -> FortiAP2(FortiWiFi) -> ClientB - Ping Success

When using VDOMs, SDN connectors are not available to be created at the VDOM level, only the global level.  Can a connector configured at global can be scoped down to a specific VDOM?  As I see it, any tenant on the Fortigate can create dynamic addresses by sourcing the global connector which means that IP address info is leaked to VDOMS that are not authorized to read that information.  Thoughts?

Why doesn't the alarm button on the device blink red when one of the firewall psu's fails or when I pull its power?

Hi all, I've blocked YouTube using web filtering, and it works well on Google Chrome. However, for some reason, my client's device using Safari can still access it. By the way, I'm not sure if I can use a wildcard block because my workplace wants to force users to use Edpuzzle instead of YouTube.Here is the filter configuration according to the Edpuzzle cookbook:Block www.youtube.com.Allow www.youtubeeducation.com and www.youtube-nocookie.com.So what I've done is create web filtering profile follow the cookbook and apply to policy that we want to blockBut unfortunately It won't work for me.

I have a 200F fortigate firewall with fortios 7.6 . Its antivirus did not get update since 2024/08/16. All other modules update without any problem.

Hello everybody, we did the backups of our Fortigate Firewalls with scp (pscp.exe -scp - batch -pw password user@0.0.0.0:fgt-config /target/folder) and a scheduled task on a Windows server.This was working like a charm.We upgraded one Firewall (60F) from FortiOS version 7.2.8 to version 7.4.4 and we recognized that the backup script is no longer working.There is no error or anything like that - also if we execute it manually it looks like it is working but no file is stored in the target folder.Were there any changes in 7.4.4 that scp is no longer working or is it a bug?I can't find anything in the release notes. Connecting to the firewall via SSH is working as usual.Any information on that or any hint to get it running again?Thank you.Best regardsRené 

We recently converted to a new cloud hosted phone solution with Sinch in our office and sense doing so I have had reports of intermittent issues with garbled voice on calls between extensions in the office. All our phones are fed PoE individually from the same Fortiswitch 448F. There are no issues at all with incoming or outgoing external calls which I've dealt with relating to SIP ALG on the Fortigates. With this issue the RTP traffic handling the voice doesn't route through the firewall and I'm at a loss as to what could be causing the issue. We resell and support this product with numerous other business customers and I have yet to hear about an issue like this so I was hoping someone might have some suggestions or feedback on this problem.

anyone experience with a virtual (VM) standalone FortiTester on ESXi with 2 ports and trying to run a DUT Working Mode Network Address Translation (NAT) test with a DUT role Network Gateway? with an TP (transparent) DUT working mode setting or an application server DUT role im seeing traffic in the port1 / port2 network. An arp who has for the provided gateway or server IP, the test then works if the rest is setup correctly.but with a client / server test I dont see these arp who has or anything in the networks suggesting a test is attempted. it looks like for some reason the test doesnt continue, it stops pretty much after starting saying it was aborted, but no hint as to why. might be something in the configuration I fail to understand. tried multiple variations. went through the admin guide, but it doesnt mention actual cases mainly config options. anyone got this working?

I was given four FortiSwitch 148Fs, but don't have enough ports on my L3 Cisco switch to plug them into.My LAN routes are known to the FortiGate via OSPFIf I plug my FortiSwitches directly into the FortiGate, will they learn the subnets from the core? Or would this be considered a bad topology?

We recently upgraded from a standalone FortiGate 1500D running FortiOS 7.2.8 to a pair of Fortigate 601Fs running the save version of FortiOS as an Active-Passive HA pair. Our deployment consists of 10 total VDOMs and 8 10G physical interfaces. There are also 2 copper HA links and 1 copper management link per FortiGate. For this deployment's configuration, we pulled a config from the current FortiGate 1500D, passed it through FortiConverter, and loaded the resulting configuration onto the new FortiGate 601F's without issue. All references and settings were identical to the previous FortiGate. Each physical interface contains either the inside, dmz, or public vlans for multiple clients that we service. The physical interfaces themselves have no IP assigned to them. Rather, each physical interface holds multiple disjoint subnets corresponding to a client's network.  Although the physical interfaces are grouped by inside, dmz, public, the VDOMs are grouped according to

Hello Everyone,  I'm trying to set up Radius for Fortigate logins and I'm having an issue. When I run the authentication tests from the GUI, it says its successful, but then when trying to login to the device, I get the message "Authentication failure." Its really quick too as if its looking for a local account. Any help would be appreciated.  Thanks!

Hello, I installed fortinac agent on mac computer by applying the document I gave below. Although the device reaches Fortinac, the popup does not open. why can it be? https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/cf9ed9ff-de2f-11ea-96b9-00505692583a/FortiNAC_Persistent_Agent_Deployment_and_Configuration.pdf

Hi, Is it possible to use a GPON OLT SFP module in a 100F?Sould this work?I would like to connect my fiber wan connection directly to the firewall.I don't find any information about this. Someone that has this setup?Specs of the module below.  GPON OLT SFP 1490nm-TX/1310nm-RX 2.5G-TX/1.25G-RX Class B+ 20km DDM SC SMF Transceiver Modules thx

Hi Fortinet Community v6.4.9 -  #fortigatev6.4.8 -  FortiManager  We have had a FortiClient set up in the past which we have lost the PSK to as it appears to have been manually changed and not recorded. We have a backup conf of the VPN to re-apply so it can still be used (1 connection), but this does not work for clients with multiple VPN connections. Is there a way to recover this key or will we need to resort to resetting it? Thanks #forticlient