Support Forum

i will be doing upgrade of FortiOS to 7.2.8 from 7.2.7.do i need to upgrade my FSSO agent as well. current FSSO is v5.0.0312.do i need to upgrade to v5.0.0314. i saw that there is 0314 available in fortinet support for fortiOS 7.2.8.

Hello everyone,I would like to know your opinion as to whether my approach was correct. Scenario:We have Site-A, where our FortiManager (7.4.3) is located and we have Site-B, which has had a FortiGate 200F (7.2.8) since yesterday. Both sites are connected via IPSec. As the IP range of Site-B in Site-A is already assigned, we have to work with NAT.Site-B has the Internal network 192.168.200.0/24 but is changed to 192.168.201.0/24 via SNAT and is also in the IPSec SA's in Site-A and Site-B with this address. The SNAT works great, but the interface address of Site-B is not translated, which is why the FortiGate now tries to reach the FortiManager via 192.168.200.x - which of course does not work.I first tried to solve this via the CLI:config system central-managementset fmg-source-ip 192.168.201.x However, this failed because there is no interface with this IP address.My solution was to give the interface with the IP 192.168.200.x a secondary IP: 192.168.201.x/32, so I coul

When I try to connect FortiGate-80F and FortiClientEMSCloud (trial) with FabricConnectorsI get a message "requires FortiClient EMS Cloud entitlement" and cannot select it.Is it possible to connect with some settings? Do I have to purchase a license?Please let me know if you know anything about this.

When creating new VMs on Promox 8.x or higer , the VM license validation fails for FortiOS VMS (FortiGate/FortiAnalyzer/FortiManager etc).Reference

According to this bug ticket 876539 and this post  I have finally resolved my issue after many years. I could not connect to some web pages, services behind vpn  via its domain names but only with its IP addresses. What helped me was to use this solution . Right now I am using Fedora 40 and Forticlient 7.2.4. Would it be possible to implement this solution for next version of Forticlient ? I think that this bug could be solved.

i have an 30e firewall i did format it and i want to flash an image with no luck it connected to the tftp server i and start the download and after that start time out can someone help me in tis    

Hi, I had upgraded my FortiGate from FortiOS 7.2.x to FortiOS 7.4.3. I am currently using deep packet inspection ssl profile. Is it expected that I also import again Fortinet_CA_SSL into my browser every time I upgrade? Is this a normal process - Upgrade of FortiOS = Import of Certificate again into the browser?I am currently having issues with SSL after the upgrade. Thank you!

Hello All, We are experiencing an issue with Video Playback Buffering consistently from a portal hosted by azure of Body and Dash cam footage from our City Police department.  Youtube and other video sources all play fine.  If I watch video from this portal bypassing our firewall it plays without issue.  So I'm a bit perplexed   Any suggestions would be much appreciated.  Thanks

Hi All, I want to redirect URL for example "example.com" to "vnexpress.net" on my fortigate model FG101E.I am trying with DNS Translation but unsuccessful.Please help me. 

When we all host traffic is forwarded from the basic policy (default Policy ) allow only internal office URL Group ) then internal office sites URL is not working properly  ( it mean sites open very slowly ) but any ip given limited access or full access then working properly Firewall 500E/version 7.4.4

I upgraded my Fortigate 61F firmware, then there is notification the device will be reboot. After that my device didnt turn on normally, it was just stuck on power LED. I have try to unplug and plug power cable, and push hard reset button Please anyone can help?

We have a WAN interface on which 6 public IPs are available.  On the WAN interface the value x.x.2.226/24 is specified for IP/Netmask. I wanted to enter the value x.x.31.227 for the source-ip of the email-server in the CLI, but I get an error message ..: config system email-serverset source-ip x.x.2.227x.x.2.227 does not match any interface ip in vdom root.node_check_object fail! for source-ip x.x.2.227 value parse error before 'x.x.2.227'Command fail. Return code -8  I need the dedicated WAN address x.x.2.227 for the forti mail-server because I have to use it for validation in an ExchangeOnline Connector. Does anyone here have an idea how I can do this or an alternative solution?Any workaround is welcomed. Thanks in advance

Hello, Good morning i am a network and systems and telecommunications engineer junior , i want to use some virtual images fortigate for labs in  gns3 for some personnal learning projects and preparing fortinet formation , when i tried to download images for gns3 they told me that  i must purchase , but i don't have a contact with company yet , so if you help me to find some trial evaluation version even one image , if possible  this is my account in fortinet : LOGIN : maouloudahmed18@gmail.com

Hi,This question is tied to this issue I had earlier. Solved: Connectivity Issue Between 2 Fortigate ?! - Fortinet Community I have the below network, the 192.168.9.181/182 is a 1Gbps physical link, and the 192.168.10.181/182 is a 10Gbps physical link. The 1Gbps physical link is for Management traffic, and the 10Gbps link is for Storage, and vMotion. Not all VLANs are shown here.  BGP is setup as below. FW1Routing table for VRF=0 C 10.11.30.0/24 is directly connected, VLAN30 C 10.11.40.0/24 is directly connected, VLAN40 B 10.21.30.0/24 [20/0] via 192.168.9.182 (recursive is directly connected, port1), 00:18:07, [1/0] B 10.21.40.0/24 [20/0] via 192.168.10.182 (recursive is directly connected, port2), 00:17:40, [1/0] C 192.168.9.0/24 is directly connected, port1 C 192.168.10.0/24 is directly connected, port2 FW2Routing table for VRF=0 B 10.11.30.0/24 [20/0] via 192.168.9.181 (recursive is directly connected, port1), 00:18:47, [1/0] B 10.11.40.0/24 [20/0] via

Hello, I want to raise an issue that someone may encountered in the past.We own 4 Fortigate (3 of the in HA-Cluster) devices which are imported as devices in Fortimanager.Fortimanager version : v7.0.12 GA build0623Fortigate version : v7.0.16 build0632 The issue is that i cannot have all of the devices Policy package status in imported state.When i import configuration for one of them this specific device change state to "imported" and the rest 3 devices changing state to "Modified". below is when i finished importing the the policy package in the 1st device below is when i finished importing the the policy package in the 2nd device  Does anyone faced this issue before? Any workaround is welcomed. 

Hello,I have VPN site to site to connecting on-prem to the azure. The connection was working properly, local subnet in the on-prem can communicate to the remote subnet on azure.But if i execute ping from FortiGate management ip why is not reachable? So if i change my LDAP connection from Server located in the on-prem to Azure VM, the connection is not success. 

Friends, a question, I need to view the network consumption per week and per month, I can only see the current consumption. Is there any way to have information for more days? acquiring a license or reporting equipment?I have a FG 60E 

Hello, I have two Fortigate Cluster, FortiManager and FortiAnalyzer. I have a problem with FortiAnalyzer that don't show implicit deny log. I already checked my implicit rules in my FortiManager to active logging for IPv4 and IPv6. Hit count on my implicit rules increase correctly, despite this, FortiAnalyzer don't show deny log. What have I to do ? Thanks for you help !

Currently getting multiple email notification for the same device when it matches a Device profile rule with Notify sponsor enabled.  Is there a away to change the notification frequency for 'Notify Sponsor'? Thanks 

Hello  I installed the forticlient for Mac (7.2.4), I cannot connect to the Internet (surf) when my tunnel is activated, I have a message displayed, no Internet connection. I can connect to local servers.Everything works fine in Windows 10 and 11.We use split tunneling, I saw that we could put a metric in the configuration, which I did but unfortunately, it doesn't work --> Does anyone know the command on MACOS. netstat -rn --> doesn't show it, route print --> doesn't eitherDo you have an idea ?I have 2 default routes of which the VPN route is first, I have already deleted it but nothing works.I will add after the netstat -rn command in the postthank you in advance for your help

Hello everybody,I'm working on a Fortigate 60E (FortiOS 7.2.8).My pc is on an isolated network (i'm the only host) and there is only one simple rule:The dlp profile is simple and is configured to block a credit card number. I built it following the Fortinet tutorial for DLP. It's configured to work with every possibile protocol.I tested this profile on dlptest.com and everything worked fine.Now, I'm trying to understand if this profile could be able to block an email that contains a credit-card number inside the text (or an attached file that contains a credit-card number).Here is Gmail:During the upload of the attached file, Gmail correctly detects the data leak inside it and blocks the upload. But if I write the same credit-card number as plain text, the mail is blocked in a strange way...the connection collpases ("an error occured") and I have to refresh the page. I can't send the mail obviously, but this is not a good filtering. You are stucked and you have to refresh the page

I am using an FG-61F with firmware version v7.2.8 build1639 (GA). Since last night, I have been continuously receiving the following two messages:Fortigate scheduled update failed.Fortigate idsurldb signature is missing or invalid.I have already tried the solution provided in this article:https://community.fortinet.com/t5/Support-Forum/FortiGate-database-signature-invalid-on-FGT-60F-7-2/td-p/217323,but it seems to be ineffective.How can I resolve the issue of the invalid signature and the update failure?

Hi, I have seen a second hand Fortigate 80E.   Can the current owner still transfer ownership to another person/company?   Or can the new owner transfer it over themselves? The owner sent me: FortiGate-80E # get sys statusVersion: FortiGate-80E v7.2.4,build1396,230131 (GA.F)Virus-DB: 1.00000(2018-04-09 18:07)Extended DB: 1.00000(2018-04-09 18:07)AV AI/ML Model: 0.00000(2001-01-01 00:00)IPS-DB: 6.00741(2015-12-01 02:30)IPS-ETDB: 0.00000(2001-01-01 00:00)APP-DB: 6.00741(2015-12-01 02:30)INDUSTRIAL-DB: 6.00741(2015-12-01 02:30)IPS Malicious URL Database: 1.00001(2015-01-01 01:01)IoT-Detect: 0.00000(2022-08-17 17:31)BIOS version: 05000007System Part-Number: P18822-02Log hard disk: Not availableHostname: FortiGate-80EPrivate Encryption: DisableOperation Mode: NATCurrent virtual domain: rootMax number of virtual domains: 10Virtual domains status: 1 in NAT mode, 0 in TP modeVirtual domain configuration: disableFIPS-CC mode: disableCurrent HA mode: standalone

Hello, I'm trying to configure a simple SSL VPN using FortiClient on a fresh install of Ubuntu 22.04.4 LTS. Fortigate seems to be correctly configured (7.2.8): used from MacOSX, and Windows works flawlessly. I'm installing a Linux Fortinate client using CLI (no GUI) - FortiClient Version: 7.2.4.0809 (installed following section "Ubuntu 22.04 LTS" for 7.2 from https://www.fortinet.com/support/product-downloads/linux ). Setting up a new connection seems trivial:ubuntu@ip:~$ forticlient vpn edit myvpn=====================Edit personal VPN profile:myvpn=====================Type (1.SSL VPN / 2.IPsec VPN) [default=1]: 1Remote Gateway: 1.2.3.4Port [default=443]: 7443Authentication (1.prompt / 2.save / 3.disable) [current=prompt]:1Certificate Type (1.local (pkcs12) / 2.smartcard (pkcs11) / 3.disable) [current=disable]:3Hovewer, after the last response during the above configuration stage, I was initially getting:Unable to use system's key store: The name

Hello everyone,I had a problem about backup on FortiAnalyzer. I use FortiAnalyzer 3000G with version 7.4.1. I try config backup with FTP and SFTP method but completely failed. I tested manual command but login denied. Can you help me how to troubleshoot ?  Thanks a lot.