Support Forum

So I am using the Fortivoice 100. Firmware v7.0.2 Build201,2024.03.13. I untick the Call forwarding PIN however it is still asking me to enter the voicemail PIN. Can you assist, please?

Hello Dears i am trying to upgrade my FortiSIEM from 6.1.2 to be 7.0.1 but i got the following errorMON_ROLE=phMonitorSupervisorset python symlink to python2 using alternatives...Version string Pattern Match PassedAppServer is not reachable from super. Restarting AppServer. This can take a few minutes...There is no such domain directory: /opt/glassfish3/glassfish/domains/domain1Command restart-domain failed.AppServer is still not reachable even after restarting it. Aborting Upgrade... anyone could help me plz since i was on version 7 before go to 7.0.1 but the upgrade faild the support team gauid me to do factoryrest but also it is faild  Bests

Hi Everyone,am running into this issue on the FortiGate 100F where i have enabled Web Filter + App Filter and am trying to block Torrent sites, phishing, malicious sites, etc.i first tried with Cert inspection only and sometimes it works, and the site is blocked but sometimes i get this site can't be reached, check your firewall and proxy etc.then i tried with the SSL\SSH inspection and i installed the certificate to the browser but it was the same scenario, and the issue is there are completely different websites from what i had blocked like yahoo, makemytrip and a lot more.am i messing something here?Please help me out. Thanks and Regards, 

I am currenlty migrating from checkpoint 3200 ha with smart console to dual 200f fortigates, my questions, when applying the ip's to the interfaces on the forti, checkpoint gw 1mgmt: 192.168.x.253/24port 1: 10.76.x.148/24port 2: 4.36.x.70/29 (wan)port 3: 172.16.x.2/24port 4: 70.91.x.80/29 (secondary wan)port 5: 1.1.1.1/24 checkpoint gw 2mgmt: 192.168.x.254/24port 1: 10.76.x.149/24port 2: 4.36.x.71/29 (wan)port 3: 172.16.x.3/24port 4: 70.91.x.81/29 (secondary wan)port 5: 1.1.1.1/24 Very new to fortinet and trying to learn this instead of using forticonverter. I tried kind of setting this up on the forti but it didn't work properly, we currently have 5 static ip's on both of our isp providers, when I configure the ha on my fortigates, they both seem to be taking the same management ip and I have to manually go in and change it to gain access back to the gui. Just trying to see where I need to start, thanks in advace. 

Hey all, I'm struggling with something super simple. I'm working through the "Hub and spoke SD-WAN deployment example" in the admin guide, trying to set one up in real life.  Some of the configuration elements, specifically the local and remote IPs on the tunnels is throwing me for a loop though. in the admin guide, on the hub side, (on each tunnel interface) they're using an IP for the hub's tunnel interface IP and then a /24 network for the remote-ip: config system interfaceedit "vpn-isp-a"set vdom "root"set ip 10.254.0.1 255.255.255.255set allowaccess pingset type tunnelset remote-ip 10.254.0.254 255.255.255.0set interface "port2"nextedit "vpn-isp-b"set vdom "root"set ip 10.254.1.1 255.255.255.255set allowaccess pingset type tunnelset remote-ip 10.254.1.254 255.255.255.0set interface "port3"nextend But on the spoke side they're using a completely different set of IPs on each tunnel interface, with a /32 for the remote-ip: config system interfaceedit "vp

Hello,  We have FortiAP 221E and 231G managed by a Forti 200F firewall. Currently, we are encountering an issue with our workstations.Situation: On the first floor of the building, only FortiAP 231G units are installed and configured. On the second floor, only FortiAP 221E units are installed. All our APs broadcast the company's Wi-Fi (WPA2-Enterprise Wi-Fi), but when I have a Windows workstation on the first floor, it is unable to connect to the 231G APs and automatically switches to the APs on the second floor. When the AP on the second floor is turned off, there is no problem connecting to the 231G units, but as soon as the 221E units are available, we can no longer connect to the 231G units. Has anyone els experiencced this issue ? Thx for help

Hello,I'd like to ask your advice. I am building policies for my FortiGate and I am creating policies for URL categorization on AD groups (students at schoolI want to ask what approach you prefer and what impact it will have on the firewall performance.1. Disallowing blocked categories (**bleep**, spam, etc) and then only allowing all HTTP and HTTPS2. Setting allowed categories on given user groups. Thank you.

I'm trying to find out if this could actually improve the security and efficiency of sending and receiving sensitive documents across international borders. From what I understand, the SD-WAN could streamline network traffic and improve data protection during transmission. Does anyone have experience with setting this up? How does it handle security protocols for sensitive document exchanges?  

Running FortiNAC V7.4 -  I have configured the following layer 3 captive portals on the ETH1 interface of the NAC VM.  IsolationRegistrationDead EndAuthentication  I would like endpoints initially to redirect to the registration captive portal as their initial landing page. I'm not quite sure what I'm missing but we do not get redirected to the captive portal and when I put the captive portal IP address a browser nothing comes up , This is a new setup so maybe I missed something . Also , is there somewhere in FortiNAC GUI where we can preview what the captive portal page looks like?   

Hello Team,Please we have 2 datacenters in different locations and we want to deploy the HA into the 2 datacenters in which one will be in abuja and the other HA will be in the different location  because of redundancy.Kindly note that we have VPN Tunnel accross.Please i want someone to guide me with the steps and configurations on how to do it. Regards,Firdausi Nababa

Hello everyone.I have two FortiSwitches in HA configuration, configured with an ISL ring (not MC-LAG). I enabled the FortiLink split interface, but as shown in the figure below, both Fortilinks are enabled (link up). I was expecting only one Fortilink to be enabled. Is this normal?  Best regardsKenzo

Good morning team.It is required to change the fortigate firewall from Master to Slave (slave to master), could you tell me if this action is performed from the GUI or from the CLI? I would appreciate it if you could share with me some document of the steps to be taken, since this is the first time I am going to perform this action and I am afraid of accidentally turning off the equipment.

Hello,i have one problem, when i disconnect the VPN, I could not be able to access the internet and the local network.I must restart the pc then i could access again the internet or local network.I am using FortiClient Linux 7.4.0.1636. 

Hello,On a Fortigate 80E I have Hardware switch LAN with 8 phisical interface configure with DHCP server, I would like to create a 802.3ad Aggregare Ports using 3 interface and move the DHCP server configuration with all reservation on this new configuration.Is it possible ? thx

We are facing issue with SSLVPN user connectivity , fofr sso authentication users . 

I would like to access virtual server ip within lan network in azure.Not from public.

I installed the Acronis antivirus on my machines and now the machines are not communicating with my Singn On Agent Configuration fortinet, could you help me and tell me what ports I need to release within the machine's firewall to allow communication?         

Hi everyone,  I am new with Fortinet devices and have  Fortigate FG-100F. I am struggling a lot understanding how many subscriptions are available and what features do they exactly offer for my device. I have tried looking onlin for Forticare, IPS, Antivirus, etc. but what I have found online so far is marketing material which is very broad and ambiguous. I want to know the specific details (e. g. What additional firewall rules can I create, what additional logs and events can I monitor, etc.). Where may I find the information I am looking for?

Hi,I have a fortigate 60F with v/.2.8 build1639 (Mature).I configuring the device with radius and an external captive portl. But I can't get it to work.This is my interface configuration:  This is my authentication settings:  This is my dns server:   This is the redirect after connaction:https :// login. spottywifi. app: 1000/fgtauth ?000d0e91e1a2c32d

Several times a day our FortiGate 200F running 7.2.8 is entering memory conserve mode. When I examine RAM usage, it shows one of the WAD worker processes consuming large amounts of memory. Looking at the web cache sessions for that worker process tells me it's holding over 800 sessions, while the other  workers are holding 40-50 sessions at most. How do I get that one process to stop doing that?   

Hello, Does anybody know how to get rid of this new stupidity in FMG 7.0.x, called "Change note"? Thanks

I am trying to find a generated heat value of switch models 124F-POE and 148F-POE in kW.I only seem to find the operating temperature and not the amount of heat generated by these devices.Does anyone know where I can find this?

Hi, We have a Fortigate HA Cluster that is managed in Fortimanager.When we do a failover it says in fortimanager that the cluster is down.I can ping from the fortigate: fortimanager.forticloud.com. It still uses the same source IP to communicate with Fortimanager.In the debug i can only see 2024-06-24 11:35:49 FGFMs: __session_cb,125: fgfm_fqdn_connect fail.. Do you have any idea? best regards, Michael 

Good day all, Is it safe to say tha the bad boy here is the Forticlient installed on my exchange server? Full and incremental backups started failing immediately after installing FortiClient. Before though, my buexec normally has errors during backups, hit and miss, a few days backup fails due to some weird errors or communication errors, other days successful backups with no interruption. I cannot say however that it is definitely the FortiClient causing now CONSTANT failed backups, but i think it is. Kindly see attached resources for more information let me know what you think:1. FortiClient on email server2. https://www.veritas.com/support/en_US/article.100043312 - Look on Possible Causes #43. Fortinet Community post sharing an almost similar issue - (https://community.fortinet.com/t5/Support-Forum/Backup-Exec-not-copying-servers-with-Forticlient-AV-installed-on/m-p/45350) Any possible solution?

Hello, I'm not getting traffic in an ipsec vpn tunnel (HUB-SPOKE). When running the command "diagnose debug flow filter addr 192.168.1.254 192.168.13.254 and" on my HUB I get:  id=20085 trace_id=204199 func=ipsecdev_hard_start_xmit line=669 msg="enter IPSec interface HUB-WAN05, tun_id=0.0.0.0" id=20085 trace_id=204199 func=_do_ipsecdev_hard_start_xmit line=229 msg="output to IPSec tunnel HUB-WAN05_0" id=20085 trace_id=204199 func=ipsec_common_output4 line=778 msg="No matching IPsec selector, drop"  HUB-WAN05 phase2-interface configuration is the same as HUB-WAN04 (HUB-WAN04 works perfectly)  edit "HUB-WAN04" set phase1name "HUB-WAN04" set proposal aes256-sha256 set dhgrp 5 set replay disable set keepalive enable next edit "HUB-WAN05" set phase1name "HUB-WAN05" set proposal aes256-sha256 set dhgrp 5 set replay disable set keepalive enable next  on both HUB-WAN04 and HUB-WAN05 the Phase 2 Selectors LOCAL ADDRESS and REMOTE ADDRESS are set to subne