Support Forum

Hello, It's possible to make native vpn windows 10 or windows 11 as vpn client to replace the forti vpn client?

I have a FGT-600F cluster running 7.0.14. On it I have two vdoms, one with a VLAN interface on an X physical interface, and one with a EMAC-VLAN on the other vdom. The two vdoms cannot communicate with each other via these interfaces. Configuration is as so:  config global config system interfaces edit "x1" set vdom "root" set status down set type physical set snmp-index 27 set speed 10000full next edit "Transit-E-2398" set vdom "Edge" set ip 99.99.99.1 255.255.255.240 set allowaccess ping set snmp-index 146 set interface "x1" set vlanid 2398 next edit "Transit-G-2398" set vdom "Gridway-436" set ip 99.99.99.2 255.255.255.240 set allowaccess ping set type emac-vlan set snmp-index 147 set interface "Transit-E-2398" next end  The X interface is up and passing traffic to other VLANs in each vdoms (this

Hi,  what is the difference between the proxy mode and ssl deep inspection because i am under the impression that both of these features have same working principle which is man in the middle, this means that the first packet is intercepted and the two sessions are created one from FGT to client and the other from FGT to server. is my perception wrong ? Because for deep inspection it surely works like the same way but for proxy mode most of the material which I study also shows that the proxy mode also works like man in the middle. 

Hi, While studying flow-based inspection, I read that FGT takes the snapshot of the packet ? I am confused that what is the snapshot of the packet ? and how the packet is processed using the flow-based inspection ?  Because taking snapshot is taking the copy of the packet and the copy of the packet is buffered and the whole traffic stream needs to be captured to match against the signature so how this mode is efficient ? What i read is that FGT takes the snapshot of the packet and compare it against the pre-existing signature database and held the last packet ? Now this approach may be valid for TCP because TCP always sends the connection termination request but UDP doesnt send the connection termination request so last packet may not be known, therefore in case of UDP how the FGT realize that this is the last packet in the stream ?

Hi Team, Good day! I just want to ask why I cant see or display my WAN 1 and WAN 2 on the SD WAN interface Members Please see the image   

Our FortiGate running 7.2.8 continues to quarantine the Barracuda load balancer, I believe because it's doing host impersonation. I can remove the MAC from the quarantine, but it shows immediately back up as being quarantined. What's the process for ensuring the MAC won't be quarantined? I can't find any documentation for accomplishing this. Thank you.

Hi Guys. Good day! I have question, I have 60D FortiGate Firewall but its unlicensed.Is it okay to use this? without license for home network and also to get new skills. May I know what function that I can use even no license. Thank you for your response, will appreciate so much! :)

Is there anyway FortiAnalyzer can display State name in addition to Country/City in geolocation?  There are cities with same names in USA and displaying State may be useful feature that we are looking for

We are trying to Install the Forti EDR trail license in the portal, but we are not seeing any files in the portal. Please help us.

I try to install FortiClient 7.2.4 on a pc with windows 11 23h2 but when the installation gets to the point of installing the drivers, it goes into error and rolling back.I uninstalled my antivirus and retry the installation procedure but the problem persists.I try to install also the FortiClient 7.4.0 version but I have the same problem.

Hi everyone, I need help with the DNS server on Fortigate. I'm using Forti as a DNS server and currently, I'm using the recursive mode because we have a DNS database. As I understand it, the recursive mode will query the DNS database first, and if it doesn't find the record, it will forward the query to the DNS system (I've set the DNS system to 8.8.8.8). The problem is that I have some domains mapped to private IPs, and when using Forti as the DNS server in recursive mode, it cannot resolve those domains. Is there any way to fix this issue?

Hi, Assistance with a network configuration. We have an application on a local server (IIS) and need access to it from the external network:I try the below steps with no luck, can't access it from an external network * DDNS:Created account and host on no-ipConfigure no-ip client on the server and connected* On Firewall:1- Configure Virtual IPs (External IP address/range: 0.0.0.0, Mapped IP address/range: LAN IP)     Port Forwarding Protocol (TCP), External service port & Map to port (80)2- Create PolicyIncoming Interface (WAN)Outgoing Interface (LAN)Source (all)Destination (VIP) created earlierSchedule (Always)Service (HTTP)Action (Accepted)NAT (Disable) and try (Enable)Additionally, configure Windows firewall inbound and outbound for port 80 Modem: FortiWiFi 30EFirmware: v6.2.15 build1378 (GA)

Can anyone explain this error to me and how I can get rid of it. It comes up in the event log of the Fortigate-200 v2.8 when I try to make a vpn connection delete_phase1_sa Thanks

FortiFirewall-VM64-KVM # get system arpAddress Age(min) Hardware Addr Interface  FortiFirewall-VM64-KVM # diagnose sniffer packet any 'arp' 4Using Original Sniffing Modeinterfaces=[any]filters=[arp]0.870537 port1 out arp who-has 192.168.0.1 tell 192.168.0.331.910426 port1 out arp who-has 192.168.0.1 tell 192.168.0.334.818708 port1 out arp who-has 192.168.0.1 tell 192.168.0.335.830426 port1 out arp who-has 192.168.0.1 tell 192.168.0.33 FortiFirewall-VM64-KVM # di packet sniffer port1 'none' 4 0 lcommand parse error before 'packet'Command fail. Return code -61 I see fortilink ip-address different from my network which is from class-c, but I see fortilink has class-c ip addresss  as seen below config system interfaceedit "port1"set vdom "root"set ip 192.168.0.33 255.255.255.0set allowaccess ping https httpset type physicalset snmp-index 1nextedit "fortilink"set vdom "root"set fortilink enableset ip 10.255.1.1 255.255.255.0set allowaccess ping fabricset type a

Dear Experts, I  cant find concrete document on how totally differentiate the advantages of using FortiSASE vs FortiClient EMS On-Prem/Cloud.Anyone here who is able to share a side-by-side comparison to enlighten me? I thought FSASE had the edge of having CASB, but reading the FortiClient EMS admin guide, they also embedded CASB. I still can't figure out when to offer both overlapping solutions to customers. Any help is much appreciated.    

Hello everyone,I would like to publish videos about Fortinet on YouTube and Udemy.Is it permissible to use the Fortinet logo on thumbnails/inside slides?I found the following page which states that the logo should not be changed - but am I allowed to use the unchanged logo for the usecase?https://www.fortinet.com/corporate/about-us/contact-us/fortinet-trademark-guidelinesUnfortunately, I have not found a direct contact where I could ask about this. 

The most common issue we encounter is a client getting on a web page claiming that they have a virus, must call a number, pay them money, etc. We use FortiGate firewalls with UTP bundle. We have most of the Security Profiles within the Policies turned on and set to seemingly reasonable settings. Are there one or more setting issues that we can check to assure we have set correctly to reduce the risk of users getting to these malicious pages? Or are these large unstoppable even with good firewall settings? I will be off-line from the forum on Sunday.

Hi all,Looking for some help deploying FortiClient with EMS using ClearPass for auth, rather than using AD/Azure directly.ClearPass is already integrated with AD/InTune and has the required info, can we leverage this info to auth FortiClient VPN users? Anyone got a solution doc that can be shared?Thanks.

I am not permitted to access my data center from outside the country, but I can use my Fortigate with Forticlient IPSEC to access a machine inside my LAN and then RDP to servers in the data center. Is it possible to configure the Fortigate itself to do Windows Remote Desktop Connections using the LAN IPs? That would eliminate the need to rely on any LAN machines being up.Thanks,Ben

Hi Guys....I'm a stranger in this town, dyed in the wool Cisco and Meraki wireless designer/operator but I've been tasked with looking at a Fortinet installation. I'm pretty sure from RF indications that the channels and TX powers that the APs are set to is not being managed automatically (several interfering APs not changing channel/power when they can see each other). Is there documentation that will show me how to set up and manage Automatic Radio Resource Management? I know what I want to do, done it before on Cisco/Meraki/Aruba, and could probably fumble my way through if this was not a customer's production network, but I'm being a bit careful Thanks for any help!

when setting something like this up does the fortiweb typically send logs to fortianalyzer cloud directly or does it use a FortiGate for example and the Fortinet fabric?

Recently, I have changed the telephone system in our company. We have chosen the FortiVoice 300E-t, with some FortiFones 480B and some FortiFones 580. Unfortunately, there are some issues with the calls, whether internal or external, and the problem mainly focuses on those using the FortiFones 480B devices. During the calls, there are random momentary interruptions or it seems like words are being lost.The telephone line used for the calls is an ISDN PRI E1 and it is connected to the FortiVoice 300E-t. The network is divided into a data VLAN and a voice VLAN; the telephone devices correctly receive IP addresses from the voice VLAN and have communication with the telephone system. The telephone system and the telephone devices are connected to FortiSwitches (148F-FPOE), which are managed by a FortiGate 60E. The telephone system and the phones have the latest firmware installed.Can someone tell me if they have encountered a similar issue or if there is a way to find out what is really ca

Hello,How we can enable VPN always ON on FortiClient VPN?

Hi, i want to create an app signature for our Forcepoint Web Proxy and i have been trying to create the signature but I get the same error: F-SBID( --name "Forcepoint-Forcepoint.Cloud"; --pattern "webdefence.global.blackspider.com)"; --service HTTP; --service HTTPS --protocol tcp; --protocol udp;) 

Hi All, I want to allow WhatsApp and WhatsApp file transfer through application control, I blocked all categories under Application control and under application overrides allowed DNS,WhatsApp and Whatsapp_File.Transfer, I am able to send text messages but not able to send images. Any idea? -SaimCategories