Support Forum

I have ems server version 7.0.6 build 0358.my vpn client running version 7-0-7need to now if i can upgrad the server without the need to upgrades  all the  my vpn clients?thank youShahar 

hi I need to implement HIGH Qos for Microsoft services. I understand I need to use shaper.i need help how to configure it.1.should i give maximum band for shard or per ip?2.the Microsoft services need to be as source or destination?3.do i need reverse shaper? thank you for  helping

I have an internship and am currently learning Fortinet. Do you have any project ideas for starting from scratch and eventually working on a larger project? I am beginning with VLAN and inter-VLAN configurations. How should I proceed from here in the security field https://routerlogin.uno/ ?

Hi guys. I have a consult about How i understand each option in Forward Traffic.for example i have consume in app zoom, in the option  "result" Accept(84.64 MB / 260.05 MB).   Understand total consume is 260, but 84.62??Put doble clic for more details in the option DATA, received Bytes: 260.05 MB , Receeived Packets: 392.072 , Sent Bytes: 84.62 MB y Sent Packets 158.634.  btw i have a shapper for this , maximum 3 Mb.  sooo   how this 84Mb app zoom entrance in this 3 Mb. for me is confuse. any help is good received.Regards   

Good morning experts. Maybe you want to help me with a problem that is killing me..?I’m trying to configure a solution for a remote office using CISCO switches and a Fortigate 60E. Difficult to explain but that is almost fixed, no problem with that.The problem is a behavior about how Fortigate manage VLANs in its Internal ports hard-switch:When all infrastructure is connected, the testing host is able to ping all VLANs. But when a physical trunk link is down between two of the Cisco Switches, the testing host loses connection to its default gateway (which is the Fortigate...!) I mean that the testing host can ping 5/6 time more from the moment the link goes down and after that it loses connection and pings are not more answered until the link is reestablished. I drew my infrastructure so that it is understood, I hope you can help me. Technical data:* Interfaces used: ports 1 to 5 of the Internal hardware-switch* Five VLANs configured on it: IDs 15, 30, 35, 50, and 101.* VLAN

Hi All,Good day! I have a very specific environment. Diagram attached.I have two Internet circuits from two providers trying to achieve diversityPlanning to connect these two circuits to two FG devices - not decided if I have to do a Active/passive or Active activeI have an existing environment where my Cisco based DMVPN is running. which I need to run for a few more months and eventually move them to Fortinet SD-WAN For now my plan is to connect these two FG devices and run them as a CPE to pass the DMVPN setupCan I configure the FG's as layer 2 ( switch mode) configure the HA which might pass all the DMVPN?Any specific observations here?After the FG's Do I need two switches to connect to the DMVPN router?

How can i block youtube on mobile phones 

Hi everyone, I want to allocate X, Y, etc. amounts of memory to storing certain log categories. Is it possible to do this in a Fortigate 100F?

HelloWe use the Forticarrier license in VM08 to inspect GTP traffic and to place necessary restrictions. We want to block protocols such as Ping, SSH in GTP. Can you help us with this?  I also want to filter SCTP messages in GTP and block some of them. I can write sctp message filter and give the ppid value and block it, but this is not what I want. I want to catch the payload in SCTP and block it if it exceeds the hit count. How can I do this? Thanks in advance

I would like to have the fortigate update its webportal URLS dynamically using some kind of script or tool or pull method.  As an example the Fortigate periodically pulls in a file from some linux server internally to create the webportal URL list that is then presented to the usergroup assigned to that portal. Any one know how to do something like that?

Hi everyone,  The full message descriptions present in the Fortigate events (e.g. Administrator X accpeted login disclaimer and logged in successfully from https(Y)) are not shown in the Log Message Reference Manual. If I go for the the log entry with the same Log ID (i.e. 32001), it only refers to successful login entry (LOG_ID_ADMIN_LOGIN_SUCC) but does not mention anything about the banner. This is really frustrating for me as I need to monitor certain events and I must how they will show in the Fortinet logs or if they will appear at all. In this case, where does acceptance of login banner appear in the log reference manual? It shows up in the GUI's Systen Events and in the log text file if I download the logs but not in the manual.  

HI All, I have 4 interface as below: Port 13 = WAN 1 x.x.x.x Port 14 = WAN 2 x.x.x.x Port 15 = WAN 3 x.x.x.x Port 9 = Internal 192.168.1.1 I have 4 static routes as below: destination 0.0.0.0/0 gateway x.x.x.x (WAN 1) destination 0.0.0.0/0 gateway x.x.x.x (WAN 2) destination 0.0.0.0/0 gateway x.x.x.x (WAN 3) destination 192.168.1.0/24 gateway 192.168.1.2 192.168.1.2 is their proxy server. Computer that access internet need to point their gateway to the proxy server to access internet. This is working fine. Customer request that they want certain PC to bypass the proxy server and point directly to Fortigate. To bypass the proxy server, the computer needs to point their gateway to the firewall interface which is 192.168.1.1. The computer that bypass proxy have speed problems. How do i configure the routing for the computer that needs to bypass the proxy?

I am using a Surface Pro 11 with a Qualcomm Snapdragon X Elite X1E8010, running Windows 11 Pro. I have installed FortiClient version 7.x, but I am unable to successfully activate the VPN. The connection always drops at 98%. Could you please provide assistance?

Hello, i'm currently struggling to set up a FortiExtender so that I can establish an LTE connection with my Telekom SIM card in Germany.I've already tried the following:- complete settings reset (factory reset)- Plan set up with information for APN (internet.v6.telekom and internet.telekom)- Firmware updates (v4.1.9-build0318) and modem firmware (19.0.0 Europe) to current versions I get the following error message:Failure Code: 0xE00A - IPV4 is down and IPV6 is uporFailure Code: 0xE009 - IPV4 and IPV6 is downFailure Type: Call Manager definedFailure Reason: NO SRV: data call is brought down because traffic channel request got rejected by CM(Call Manager) since device has no service I have already managed to get a FortiExtender online after several attempts - but with the America modem firmware.with the second one - no chance - other SIM Cards like Telefonica works.   many thanks in advanceGreetings

greetings, I'd like to know what is the meaning of the time duration next to the DNS server in Fortigate.When it is showing thousands ms, we can still ping it without issue.

Hi everyone,I'm encountering a strange issue and I need some help.I have two spoke sites and one hub in my network. The design involves Active Internet 1, Active Internet 2, and Backup Internet 3. I've noticed that the hub site is advertising the best routes, originating from other spokes' Internet 1 and Internet 2, to the backup BGP peer. This is causing routing issues and incorrect shortcuts.However, I managed to find a solution to prevent this by configuring a community on the hub. Now, whenever the hub receives subnets from the backup with a certain community, it will only advertise them to other backup spoke circuits with the same community and deny anything else.But now, I'm trying to advertise all paths to the spokes, not just the best one. Is there any way I can achieve this?I've configured IBGP multipath with the "adv-multipath" command, but I've noticed that this command only advertises the best routes from the routing table of the hub, not the least preferred routes. Therefo

Hello, i created an report in the fortianalyzer to find out all downloaded files. I use the Chart "File Transferred by Applications" for that. In the result i`m missing files. So i cant see downloaded exe and zip files. The sql uses the variable $log. How can i resolve that? Thanks for some feedback Walter

I am trying to block known malicious IP and created appropriate address group, added the IPs then created a rule to deny traffic coming from this group. I have seen an IP that came in which means that the new access rule which is on top of the list isnt working.Here is the link I follow but it doesn't work.https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-block-specific-external-public-IP-address/ta-p/195128Is there also any source of known malicious IP from somewhere and feed it to my firewall. That way I don't have to manually update each time. TIA :) 

Hi!is Master session information showing "helper=sip" applicable to Proxy-based (ie. ALG), or Kernel-based (SIP Session Helper) or both types?And, what does 'state=' specifying "inherit_sockport" value mean?R's, Alex 

Hello, when configuring Fortigate based SAML authentication (for client browser initiated auth) is there a way to allow specific URLs before SAML auth takes place ?

Hello I have a bunch of Lenovo X1 Carbon's using Forticlient. Those. restarts themselves constantly. Any ideas? Thanks in advance. 

Hi everyone, There are some specific events I want to log. I have been reading the FortiOS Log Reference Manual and from what I understand for the logs listed there to show in the fortigate, their corresponding category has to be included in Event Logging within Log & Report - > Log Settings. However for some of the logs listed in the manual, their category (e.g. SSL and wireless) does not show up in the Fortigate Log Settings. If I wanted to log these categories, how would I do this? Also could someone confirm me if by including the category (e.g. system) in the Log Settings, it means all the events whithin that category will be logged, or must someone enable/disable a specific feature for some events to be logged?

Hi everyone,  I want to be able to choose specific system events (e. g. failed login attempts, policy changes, etc.) to be logged. I have been reading the admin manual but have not found how I may achieve this. Within Log & Report - > Log Settings - > Global settings, there are only log categories (e.g. System activity events) but no explanation as to what specific events they refer to. Would you mind telling me how I may choose the events I want to log?

Hello Everyone! I didnt found a similar post , so here I come.We got a Fortigate 600E at our company and we are trying to block Whatsapp Videocall only (voice call, text and file transfer should work). I know there exist Whatsapp signatures in app-control, but I can't figure out how to disable only video without affecting voice. Is there any workaround to only block Video calls? No matter if is using firewall policies, app control, etc. Thanks!!

Hi, recently we viewed in our logs a large number of attempts to gain remote access from a bunch of different ip addresses.  In Checkpoint it's possible to quickly block a large amount of ip addresses by doing something like 'fwaccel dos deny -l filename'. Is there something similar in Fortigate (Forti Manager)?  We're running 7.0.12 btw.__PRESENT