Support Forum

Hello everybody,I've FortiClient EMS in my network. The filtering is working correctly, but I can't understand how to view generated logs. Is it mandatory to send logs to FortiAnalyzer or to an external server?Where can I view generated logs on FortiClient EMS?Thank you 

having the same issue as quite a few people, i have managed to resolve the issue of having users not seeing the remote access feature in their forticlient GUI's.  Within the EMS server - goto Endpoint profiles - Remote access - Click and edit the required profile - Click on the XML option (top rightish) - Scroll down to bottom, look for the following   All you need to do is edit the file and change the 0 to 1, save the file.The new profile changes will be updated on the client and they are than able to see the remote access feature.    

We would like to know more information about the Crowdstrike issue. Just wanted a confirmation that this issue could happens to Fortinet Products too such as Forticlient or any?  Does CrowdStrike has any impact on Fortinet products?  TIA :) 

Hello everybody,on my PC I've FortiClient, and in my network I have a Fortigate. Essentialy, regarding web filtering, FortiClient and Fortigate have the same settings and the same exceptions.When I visit a "tobacco" site, this site is correctly blocked. Reading the logs, how can I understand if the site was blocked by FortiGate or by FortiClient? date=2024-07-23 time=14:26:54 id=7394806744431460361 itime="2024-07-23 14:26:54" euid=1026 epid=1030 dsteuid=3 dstepid=101 logflag=3 logver=702081639 type="traffic" subtype="forward" level="notice" action="close" utmaction="block" policyid=6 sessionid=6330623 srcip=10.1.10.31 dstip=104.26.14.200 transip=192.168.1.4 srcport=55936 dstport=443 transport=55936 trandisp="snat" duration=140 proto=6 sentbyte=220 rcvdbyte=4659 sentdelta=104 rcvddelta=260 sentpkt=4 rcvdpkt=13 logid=0000000013 unauthuser="xyz" srcname="MacBook_Pro" service="HTTPS" app="SSL" appcat="Network.Service" fctuid="92CB99E956C6570AB48FD3B7E84960C7" srcintfrole="lan" dstintf

Hi Team, I have created web-filter based policy by allowing web-based email access.But I want to restrict only for gmail access with tenant based.Anyone can help me out for this. ThanksSrinivas.

Hello everybody, I'm working on a Fortigate 60E with FortiOS 7.2.8.I've a doubt about how the UTM works:Let's focus on DNS Queries.   As you can see, in the last 24 hours, there is no security issue, but only some "Redirect" (that I think are not a problem, correct me if I'm wrong). Let's for example check one of these records:date=2024-07-23 time=08:58:28 id=7394722112100892677 itime="2024-07-23 08:58:29" euid=1027 epid=1031 dsteuid=3 dstepid=101 logver=702081639 type="utm" subtype="dns" level="warning" action="redirect" sessionid=6043965 policyid=6 srcip=10.1.10.11 dstip=192.168.1.1 srcport=63422 dstport=53 proto=17 cat=61 logid=1501054803 unauthuser="xyz" fctuid="1A9AD3B2A9C5591F86609B1EC67358B3" eventtime=1721717908456556239 xid=33024 qtypeval=28 srcintfrole="lan" dstintfrole="wan" ipaddr=xyz srcintf="NTD FNet WiFi" dstintf="wan1" profile="dns_exempt" srcmac="5c:e9:1e:a9:95:b2" qname="js.srvtrck.com" qtype="AAAA" qclass="IN" catdesc="Phishing" unauthusersource="

Hello, I did not find a clear statement, if and which DAC-Cables are compatible with FG-200F / FG-100F.FortiSwitch-Compatible Transceivers states only compatibilities for FortiSwitches. And Fortinet Transceivers Data Sheet has only informations on tranceivers, but does not state anything about compatibility.Is there a HCL specially for FortiGate? In my case we like to use FN-TRAN-SFP+SR and FN-CABLE-SFP+1 in FG-200F and FG-100F best regardsMartin 

Is there a way to ensure that Forticlient update is only deployed when a device is registered as on-fabric?  Currently whenever a new software updates is available the forticlient will start the update.When they're connected to the SSL VPN, which correctly registers as off-fabric, the update will drop the connection, which is annoying. I need these updates to only happend when on-fabric, or if possible an option to start the install manually through the client. All my Forticlients are connected to onPrem FortiClient EMS service. 

I notice that fortigate doesn't send certificate chain for vpnssl portal neither for authentication portal.I have try to reimport pfx certificate being safe that contain full chain.I have checked also other fortigate and none of them send the chain causing error on certificate validationChecked on FortiOS 6.2 and 7.2

I currently have 2 FortiSwitches I'm running in stand-alone mode. The switches are connected from port 24 to port 24. I ran the following commands:Config switch interfaceedit port 4FFTFXXXXXset native-vlan 10set allowed-vlans 1-4094set auto-discovery-fortilink disablenextendHowever, when I go and show that interface it still has the native vlan of 4094 listed. Any other port I can change with no issues. I've researched and can't find a reason it's not allowing me to change the interfaces that are connecting the 2 switches.Any ideas or suggestions will be greatly appreciated.

Hi folks,I wonder if I interpret the following right. The "Domain" polyfill.io is listed at Fortiguardservices as "bad" since 26th of June 2024.   See: Threat Signal Report | FortiGuard Labs We recognized in our FGT, that we have logs about botnet-cc-connections exactly to this domain (polyfill.io). Our investigations show that our DC is trying to lookup the domain. When it tries it, the FGT redirects the request, which is good. My assumption now is, that our clients (or some of them) are trying to lookup polyfill.io, ask our Domaincontroller/DNS and the DC/DNS is forwarding the request to the provider-dns. Then the FGT blocks it. As polyfill.io was not "bad" before 26th of june and a lot of websites use the services of polyfill.io i further assume, that our clients are simply surfing to websites, which use this "tool" (polyfill) and then we got the botnetwarning. We have not found any indication of a infection at our internal computers till now.

I'm having issues with FortiClient (7.0.3.0193) on Windows 10 Enterprise (19044.1645) inside a virtual machine (VM-ware)Installation of the Forticlient worked without issues.Configuration of VPN is OK (identical config works on host).Connection gets established according to Forticlient.Once connected, every communication through the VPN (ping,...) crashes Windows with a blue screen.Stop code: KMODE EXCEPTION NOT HANDLEDWhat failed: ndis.sysOn the host computer everything works without blue screen... Any idea how to solve this?

Hello everyone,We have recently started using a FortiManager VM (v7.4.3-build2487 240514 (GA)). We use it to manage a Fortigate 400F and of course also create our policies with it. Now to my problem: I have not been able to change the view mode for a few days and am now stuck in ‘By Sequence’ mode, the button for this has disappeared. According to a Fortinet article, the reason for this is that there are two interfaces in From or To - but I have checked each of the rules and there is only 1 interface in From and To in each rule. Do you have any idea how I could correct this? Kind regards Marc

Is anyone here having a successful configuration of playbook based on the components I have? In my lab I have FAZ VM with Security Automation, FG and FortiEMS. if any could share their working config it is highly appreciated.  

Howdy, We have a FW policy where web-based email is being blocked. I wanted to allow just Gmail through so I created fw addresses used by gmail, added them to a FW Address Group. I then created a fw policy from internal to wan1 with the destination address the group I created. I placed this policy above our fw policy that blocks web-based email through categories, however Gmail is still being blocked. The block page says: URL: mail.google.com/mail CAtegory: Web-Based email Any ideas? FG50B v3 MR7 P9 Thanks!

I want this particular ip range to be added into static route via vpn tunnel. How do I do this? 

I am trying to configure an Captive Portal employee SSID on a Fortigate 60F that would allow users to sign-in with their Google Workspace email address to sign them in. Is it possible? Any help would be appreciated. We don't have FortiAuthenticator so option will not work for us. FortiGate FortiManager 

Hi thereMacOS Sonoma 14.5FortiClient 7.4.0.1645 I am using prediminantly mobile IPsec VPN connections, and I noticed that when the underlying network changes, the network connections are not working properly anymore. Especially when on the move (using mobile 5G connections from my phone), or changing WiFi connections, it breaks routing or connectivity. A simple disconnect and reconnect of the respective IPsec and WiFi connection doesn't help, and I need to reboot the Macbook to get a proper connection back, and access all sites or devices, irrespective of whether these are behind the VPN connection or not. Anyone has had a similar experience? Cheers,Jaap

Merhaba, birkaç günlüğüne uzaktaydım ve eve geldiğimde LG olan akıllı televizyonumun 360 gözlü bebek kamerası olarak yeniden adlandırıldığını ve dizüstü bilgisayarımın adının bitcoin minör falan olduğunu gördüm. Ev Wi-Fi'ma bağlı bazı cihazlarımın takma adları nasıl değişti? Bilgisayar korsanlığı konusunda endişelenmem gerekiyor mu?Hello, I am connecting to a customer's server with FortiClient VPN Only(Free). However, the connection drops every 8 hours. Auto connect and always up buttons are also disabled. How can I solve this? Is there a method without the FortiClient app? With a different VPN client or RRAS?

I followed the tech tip from: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Setting-up-a-VIP-load-balance-with-HTTP-host-check/ta-p/198274Now I have the question about the following situation:I have one wan ip adress and the situation that i want different IPS/WAF profiles to the different http-hosts.Is it possible and how? I tried creating a new virtual server with the same pub ip and other real hosts with different http headers but it didnt work. If i had fw rule 1 "wan-2-owncloud" where i had applied VServer-Owncloud with real ip 192.168.1.1 and port 443 and a 2nd fw rule "wan-2-wordpress" with realip 192.168.1.2 and port 443 then either owncloud was unreachable or wordpress was unreachable. What do I do if i want to apply IPS+WAF+FullDPI to wordpress and to owncloud just IPS+FullDPI?

Hi Everyone, I have installed EMS agent in Macbook but its not syncing up with EMS server so I'm trying to uninstall it but it is not happening so please suggest some steps to sync agent with EMS server & how to uninstall it from MacOS. Regards,Hariharan 

Hello, I have connected a Fortigate 70F and Fortiswitch 180F together through fortlink and the switch is authorised+online. When I navigate to Fortiswitch ports there is no way for me to edit the ports, why could this be?

Hi, We got a problem with one of the suppliers having a Fortinet FW regularly blocking our traffic because it is tagged as using QQ application, with specific blocking rule being the QQ_Sign.In We have no QQ IM appliaction on our end, we send only SMPP traffic towards the supplier and nothing else. We can't find the exact reason why the rule is triggered, can someone please share some more information on what is that specific rule looking for when filtering the traffic? Is it possible that the rule is triggered for specific SMS messages originating from Tencent?

Hi,today I have been upgrade my fortigate 601E to FortiOS version 6.4.5. I want to run command #exe ping-options source but after I check on CLI fortigate I can't perform that command. Could you give me information regarding this case ? Thanks.  

Hello all, I am running Forticlient 7.2.2.0753 on RHEL 8. I have successfully installed it using the RPM but when I try to create a new profile, I get the error below. I have installed it as root (which is required) and am running this command as a different user as root is not allowed. This seems to be a permission error but there is no information to see where it is trying to write to, and my user has full access to its home directory. Does anyone know what might be wrong? $ /opt/forticlient/fortivpn edit "CLI VPN"Failed to set up FortiClient directories.