Support Forum

hello I need the forticlient vpn version 7 msi installer to deploy via GPO in my domain, do you know where I can find it?

Hello!is there a CLI command authorize "Unauthorized Devices" - equivalent to that in FortiAnalyzer "Device Manger" GUI?R's, Alex

I have a fortinet that has several vdom and all work properly but I want to configure some interfaces on the firewall but I want to only pass traffic does not analyze it or anything just to work as a swicth I think it could be done with a vdom in transparent mode but I'm not sure if that would work and at the same time would work properly the other vdom. I wouldn't know how to configure the vdom in transparent mode either.

Hello! We are facing a problem with disconnected FortiAP.After FortiGate upgrade to version v 7.2.2 b.1255 our FortiAP seems like it's disconnected.   On Edit Managed AP panel there is information that this AP is connected via Ethernet and it has IP address assigned - this AP is resolvable via this address and we can login into it.Clients can connect to networks availble on this AP but we still see this AP as disconnected. What can we do to see this AP as Online without resetting it to fabric state?   

Hello, I need to set up VDOMs on an existing installation. I have enabled VDOMs on the Fortigate, so I can see the root VDOM. I have created a VDOM1, and I want to completely move the contents of the root VDOM to VDOM1 (the VLANs, the rules associated with the VLANs, etc.). How can I do this simply and cleanly? I also have FortiManager available. In the future, I will need to create other VDOMs, which is why I want to move the contents from root to VDOM1. Thank you for your help!

Hi I have a problem when my FortiManager rebuild and restore configuration, Fortigate device connection is down.I follow below KB, but it seems not working.https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-replace-the-serial-number-of-a-FortiManager/ta-p/195106 Kyle_FMG-VM64 # diagnose fgfm session-listFortiGate-60E(261) sn(FGT60Exxxxxxxxx) ip(10.10.10.67)state(get auth) tunnel() uptime:unknownSession count = 1 (tunnel 0, auth 1) Thanks.

Dear Support,is there a way how to use FortiClient 2FA with other app than FortiToken mobile? In our case we are using Remote Desktop Manager (https://devolutions.net/remote-desktop-manager/) as a shared store for credentials for our team. There is support for TOTP and it works perfectly fine in the places, where Google Authenticator works. BUT not for the Fortinet 2FA, at least according to the https://www.reddit.com/r/fortinet/comments/s8qcqb/comment/hthwx0k/ or https://github.com/andOTP/andOTP/issues/508 . We dont't care that push notification wouldn't work in that situation... Can I make a wish for interoperability added to the roadmap? Kind Regards

I'm trying to use IPsec VPN to connect and access to http://xxxserver:8121/Login.aspx . For Windows, I'm able to resolve the DNS resolution problem by adding 192.168.1.xx xxxserver to hosts file. But for mobile, I'm able to connect to IPsec VPN, but when I try to access to the system, it show This site can't be reached - DNS_PROBE_FINISHED_NXDOMAIN error. How can I solve it ? I cant simply add the server and server ip in hosts file like window for mobile phone.FortiClient FortiGate 

We are exploring whether we can integrate our Fortigate FG401E with TrendMicro using the security fabric connector.But i don't see it in my FG401E using FortiOS 7.2.8.is this only for certain FG firewall ?? TrendMicro Integration with Fortigate FirewallIntegrating 3rd-party services using the Trend Micro Vision One Service Gateway

i will be upgrading my fortigate 401E to 7.2.8.do i need to upgrade the FSSO agent as well?current FSSO agent is 5.0.0312. i notice that there is version 5.0.0314.

Hi!I´m new to fortigate and I´ve spent some time but did not find a solution or hints in the forum on my question: I have configured a DNS-server on the local network.I want to migrate the windows hosts-file entries to the DNS-Server. in the hosts file I find entries likemyserver 192.168.1.55 how can I add this to the fortigate DNS database?the computers are not in any domain. I have not configured a domain.I just need the plain computername to be resolved to the local IP-Address.Is this possible? Many thanks

Hi, I'm trying to install Forticlient VPN 7.2.4 on Windows 10 Enterprise build 19045, but the wizard fails and shows the following error dialog:  The last displayed message in the status bar was "Status: rolling back action".On the same laptop, I've been using an older version (namely 7.0.1.0083), which I uninstalled before launching the new setup. Now even if I try to reinstall the old version, I get the same rollback error as with the new one. Any help would be highly appreciated.

Good morning friends, a question. I have several web services posts on fortigate. According to a report, I see that the attack events are related to the http port. What considerations should I have before removing the http port in the publication? Is it simply changing the port in the VIP? Or is it also required to make changes to the web servers?

Azure's "VWAN" integrates with a number of security partners, Fortinet are one of them. Fortinet offer SD-WAN as a managed application (Network Virtual Appliance) that deploys into an Azure VWAN and talks BGP with the VWAN hub allowing for exchange of routes between your on-prem, azure VNets and SD-WAN branch locations. The NVAs (a pair of VMs are deployed) are managed by Fortimanager. To access the NVAs shell, you must connect using the Fortimanager Web UI. There's no other way to interact with the SD-WAN NVAs...Along with connecting to the NVA's shell, it's also possible to reboot them and shut them down... And here's my problem....I shut one of the SD-WAN NVAs down while testing/troubleshooting but I cannot find a way to restart it!  I cannot find a "restart" button in Azure for the SD-WAN managed application and when i tried using "Start-AzVM"  PowerShell command i get error similar to... "Error: The client 'user(at)company.com' with object id 'xxx-xxx-xxx-xxx' has permis

Friends I am having problems with application blocking on the firewall.For example, in the app control and web filter profiles, I added the Facebook application and in the web filter the Facebook wilcard, but users can still access it.In the Internet exit policy, the certificate-inspection profile is enabled but the blocks are still not applied. I tested adding the deep-inspection profile but users still manage to access it.checked that users have not installed any other application that could bypass the firewall. Any other recommendations?

ArticWolf hasn't release which two vendors are affected, so I was curious if Fortinet products are affected.  http://arcticwolf.com/resources/blog/lost-in-the-fog-a-new-ransomware-threat/ Thanks,  

Hello, there is exist a way to manage fac from fmg? I didn't find the option to check fmfg under the fac interface as for the fortigates, when I try to add ip from the fmg via the standard adoms it gives me a network probe error even though the two devices ping correctly. There is exist a guide about it? BR, G

Hi.I have several remote stations connected by IPsec VPN. I use a combination of FG 30e and 40f on those stations. there are several configs and most of them works fine. But I run into trouble when the FG needs to traverse a router that use port NAT or dual Carrier LTE.Actually port NAT is not a problem until now, when I have to place two FG's behind the same router. So both FG's use the same external IP on the internet. I have not found a way to config this so the central FW can separate the two VPN tunnels. Wen using an LTE router everything woks fine until the router change carrier, and by that change its external IP. The tunnel falls down, and we have to wait until it change back to the IP of the original carrier. I have not been able to create a config that can use both IP's. Am I missing something?Of course, all these problems would have gone away if I could set up the VPN-tunnel using something other than an external IP that I can't control, like a serial-number,

Hi there,i am getting this Error when i update license of Forti analyzer.

I'm proofing out an SD-WAN/AD-VPN configuration prior to replacing all of our site to site tunnels and have one question. Everything in my setup is working brilliantly, except that the shortcuts between the spokes seem to be persistent. I had assume that by default, they would tear down after being idle for a time? Is this the case or is it something else that needs to be configured?I've been following Fortinet's SD-Branch Deployment Guide in building this out.

Hello,I know that exists 2 modes that are loose or strict but I didn't understand the differences between them.Thanks,

In process of backing up a FortiGate configuration file, what algorithms and encryption methods are employed to ensure data security and integrity? please provide details on any default settings as well as options for customization.

Hi folks, maybe it is a dumb question, but I'm in doubt about agent status on Azure VM.We have a HA Cluster, Active-Passive deployment in Azure and the secondary unit is showing as "virtual machine agent not ready" in console.As I now, the standby fortigate don't have active routing table, so that behavior should be normal, right?

Hello, I am using Fortigate with FortiManager. I have configured several VDOMs based on this schema.  I want the user of VDOM1 to be independent in creating their own IPSEC tunnels. They have public IP addresses routed within their VDOM. How can I do this? Thank you for your help!

Hello dear Fortinet Community! I am investigating a curious situation in a customers enviroment. There is a continuous problem in 2 different VLANS (the first one is on an AP and the other on a wired VLAN)The problem occurring is that the client PC suddenly drops packets. I cant find anything unusual in the FGT error log history from the client IP both in the wireless VLAN or the wired one.If the user hotspots from his mobile everything works fine.The problem was first noticed in Video calls where the user would suddenly loose connectivity.I tried pinging from the users pc , another pc on the same wired VLAN and from a different pc in the wireless one towards 8.8.8.8.I can see packet losses but not at the same time and not a steady interval. It can happen from an hour to 10 minutes to two and half hours. Again i say it doesnt happens at all the different PCs at the same time.To add the wired VLAN policy has only web flow based module, AV flow based module, DNS module and