Support Forum

Hi Fortinet community, I was reading the Delayed remediation | FortiNAC-F 7.6.0 | Fortinet Document LibraryBut in my testing, the dissolvable agent keeps dissolved after scanning even though the host status is Pending At Risk. Am I doing correctly? I am expecting the agent will stay in the host until user has resolved the issues.FortiNAC

Hi Team, I have two ISP at branch and a single ISP at Hub. I have configured dialup tunnel on hub and static tunnel on branch side.  The issue here which i am facing is that only one tunnel is coming up at a time only, the second tunnel phase1 only showing up at branch side. Is it the expected behavior or not and if, it is expected then is there any way to make both the tunnels up.  Kindly help here, below is the snapshot of the tunnels.                

Hi team, is there any fortigate API exist to get predefined application list and their default ports.for example for thishttps://fortiguard.fortinet.com/appcontrol/59759application name is Spacely.AI_Post and default port is TCP/80, TCP/443 and UDP/443.I want an api that provides either application name or id and their respective default ports.

Hi,I have created on Fortigate SSID with WPA3 Enterprise Only, on the client (Windows 11) is created manually wifi profile with security type 'WPA3 - Enterprise' and encryption type 'AES'.The client wifi card Intel AX201 support such authentications:netsh wlan show drivers Interface name: Wi-Fi Driver : Intel(R) Wi-Fi 6 AX201 160MHz Vendor : Intel Corporation Provider : Intel Date : 2025-01-02 Version : 23.110.0.5 INF file : oem163.inf Type : Native Wi-Fi Driver Radio types supported : 802.11b 802.11g 802.11n 802.11a 802.11ac 802.11ax FIPS 140-2 mode supported : Yes 802.11w Management Frame Protection supported : Yes Hosted network supported : No Authentication and cipher supported in infrastructure mode: Open None Open

Our connectivity provider gives us a VPN using Forticlient VPN, which has been fine until the 7.4.3 release. We've had users having issues all over the place, from the connection dropping soon as it connects, to users being prompted for admin rights to connect. I'm on 7.4.3 Hotfix and have none of these issues but a number of the aforementioned reports are on that version as well........All on Windows 11 managed by Intune.Anyone experiencing this ? Any quick fix ? Have raised an issue with our provider but not expecting a fix in a hurry and they'll probably need to go back to Fortinet.

I am trying to install a FortiClient (VPN only) FortiClient I have downloaded the instalation file after filling the form https://www.fortinet.com/support/product-downloads#download-vpn-only I have selected the Windows version.When I launch the instalation file, it downloads image, unpack it, but then nothing happens.  

After upgrading Fortinet, all SSL requests are being blocked. I would like to know if there are any adjustments that need to be made to my firewall.   FortiGuard

Hello,I have the following setup and would like your clarification.We have a virtual FortiGate firewall deployed, with multiple services running behind it. In case this virtual machine experiences an issue or goes down, we would like to have a backup / failover–like solution, similar to what we normally implement with hardware FortiGate HA.Is it possible to implement such a setup using two virtual FortiGate instances?Additionally, I have a licensing-related question. We currently have only one license purchased for a single virtual FortiGate instance.In a hypothetical scenario where:the primary FortiGate has an issue, anda secondary FortiGate VM exists but is powered off,would it be possible to use the same license on the secondary VM?More specifically:If the primary FortiGate fails, can traffic automatically fail over to the secondary VM?Or is it mandatory to configure HA, which would require purchasing an additional license?As far as I understand, FortiGate licenses are tied to the s

In my environment, a FortiGate currently manages both distribution and access FortiSwitches via FortiLink. I need to replace the distribution switches with a different model. If I create a new FortiLink interface for the new distribution switches and then connect the existing access switches to this new FortiLink, will the FortiGate preserve their configuration and policies?

  Dear, There are some difficulties in importing YouTube access data for the model of the video that you claim to use. Please note that the set of children currently in use is deleted from the complete URL. This is how you compare the set of kids and capture the result. No account of the analysis (Registro Detalhado de Navegação do Usuário), it is possible to view correctly the details of the site and of the application for the same day and local. Can you check the group of children to determine whether you have the correct motivation to confirm the access details and the correct category? This group of children has been transferred to the initial implementation of the product and has not been modified. Two years passed, and we noticed this issue. Credit that this is also possible if it affects other access records without any relation.   Reference: Relatório do Analisador Padrão (Registro Detalhado de Navegação do Usuário) The FortiGate also contains various access registra

Hello, I'm getting the "Failed to connect to the update server" error when trying to install FortiClient VPN. I tried to install it on multiple networks but still the same.I saw about an offline installer but I can't acces it as I am a free user. Is there any solution?...Thank you for your help !

Hi all,I was thinking about upgrading to 7.4.9 but I’m seeing a few threads and posts about issues with IPsec tunnels. Is there a particular configuration type which are mainly impacted? We have many tunnels with third party vendors. Will 7.4.9 cause issues with them? Is there a patch or fix for it?I checked 7.4.8 but it’s got a lot of vulnerabilities which are patched in 7.4.9, so I’m stuck on my decision.Thoughts?Thanks.

Hi Community,We received a new FG1801F firewall for activation and encountered issues with the MGMT1 & MGMT2 Port down. - We tried to add admin & trusted host IP address but still not working - Only access to configure is via Putty - When we plug in on the RJ45 Ports got traffic. Please advise as only the MGMT1/MGMT2 Ports are down. We cannot connect HTTPS & ping the default MGMT1 /MGMT2 IP 192.168.1.99 & 192.168.2.99 from our laptop 

I purchased a used 570i and whomever the prior owner was, changed the admin password from ADMIN or 25646 to something unknown. I obviously can’t hard reset it to get it to provision to my system. Is there a way to hard reset the phone and erase everything without knowing what that admin password is? Thanks.

Set up Forticloud MFA through Yubico app in the usual way by scanning the QR code and thought that it worked but when I tried to sign in today the actual code in the authenticator app is grayed out. Is anyone else using this method and how did you get it to work?

Hi, Sorry if the following question is a stupid one. I recently took over the management of our FortiGate's, so all of this is pretty new to me.  We currently have a hub and spoke architecture with our HQ handling the connections between all of our remote sites. We have site-to-site IPSec VPN connections with each of our branch offices. Our HQ has two individual ISP links. We use OSFP as our primary routing protocol. We've recently been experiencing an issue with one of the ISP links in our HQ and that is impacting some of these site-to-site connections. I wanted to introduce redundancy, establishing IPSec connections on both the HQ's WAN interfaces for each branch and I know our previous administrator was looking into implementing IPSec VPN with SDWAN to achieve this. Each branch would have connections back to the HQ on both WAN1 and WAN2 interfaces, so if either is disrupted, the branch site would not lose access. It should be noted that some sites

Having an issue I can't figure out and want to see if anyone else has experienced this same issue. I am trying to create an ldap profile in FortiManager to test using OU groups or specific users in firewall policies. Current version of FMG and FGT are 7.4.8. In FMG, Under policy and objects/user & authentication, I am creating the ldap profile and saving (no where to test query or creds). I then go to create an ldap user under user definition and as soon as I select the ldap server I get an operation error message. Doing debugs, it comes back as invalid creds. I have verified the creds were correct many times but still the same. I am also able to create the ldap server on FMG under system settings / remote authentication and the settings work everytime. I also can replicate the same configuration directly on the firewall successfully. Anyone else run into similar issues and find a work around? The only workaround I can think of is to create the ldap server on the FGT and then

HiI continue to try to configure my first FortiGate. After admin login, the GUI hang on register  I think it's beacause it has no internet access.So I tried to configure on CLI.First WAN : edit "port1" set vdom "root" set ip 192.168.99.191 255.255.255.0 set type physical set alias "WAN" set role wan set snmp-index 3 next Then routeconfig router static edit 1 set gateway 192.168.99.254 set device "port1" next endThen DNSconfig system dns set primary X.X.X.X set secondary X.X.X.X endThen firewall policyconfig firewall policy edit 1 set name "LAN_to_WAN" set srcintf "any" set dstintf "port1" set action accept set srcaddr "all" set dstaddr "all" set schedule "always" set service "ALL" set nat enable next end What have I missed :) ?RegardsMarc

We're currently using a FortiGate 201E (v7.2.12), and encountering an issue with FortiClient VPN-only version 7.4.10.0196 on iPad. When connecting:Repeated "Insufficient credential" error, even with valid 2FA tokenEventually shows "Unable to connect", VPN session endsAfter multiple retries, VPN connects successfully Issue only occurs on iPad, not Windows or Android.Looking for any insight or similar experience — would appreciate any help!

HiI've just recieved my FortiGate 200G.I am following the quickstart guide. It says to connect WAN port. But there is no WAN port So I have connected a PC to the MGMT. I manage to acces the GUI.But It wants to connect to FortiCloud. But no wan port plugged = no internet access. So I tried console CLIhttps://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-initial-configuration/ta-p/283529 config system interface edit port1 set ip 192.168.99.99 255.255.255.0 command parse error before 'ip' Command fail. Return code -61 So I am a little lost.Can you help ? Where can I find a Quickstart guide updated ?RegardsMarc 

We've been having issues getting a SiriusXM player to stream audio when connected to our network and Fortigate 100F and 200F firewalls running 7.2.12 build 1761 firmware. We have created a Firewall Policy for the device that Allows all traffic, with security profiles removed and no SSL inspection. DNS Helper has also been disabled for diagnostic purposes, and we are using external DNS (8.8.4.4 and 1.1.1.1). When checking Forward Traffic logs, we see no traffic being Denied, but the player will not stream audio. We verified the traffic for the device is using the Policy that has been created for it. When connecting the device to a wireless hotspot, the audio streams properly. Below is a sample flow debug:id=65308 trace_id=1 func=print_pkt_detail line=5813 msg="vd-root:0 received a packet(proto=6, x.x.x.x:35366->34.215.0.215:443) tun_id=0.0.0.0 from VLANx. flag [.], seq 288633703, ack 3087288262, win 1503"id=65308 trace_id=1 func=resolve_ip_tuple_fast line=5901 msg="Find an exist

Hello everyone,We are currently running 7.4.7 on all our Fortigates (around 35 of them). The recommended version Fortinet has listed is 7.4.8 but we are considering jumping to 7.6.Are there anyone here running v7.6 and especially v7.6.5 in their production network? What’s your experience with the version? Any issues you have faced? I see it being a mature version as well. Some have mentioned that it is ”still too early” for 7.6 in a production environment but the 7.6 has now been out there for over a year now.

I have an on prem AD synced to Entra - my EMS cloud is connected and the Entra domain is imported over. I have configured SAML so when the client is pushed to my contractors who are non-domain joined devices, they will be prompted for credentials before connecting to EMS. The SAML redirect is occurring, but I am receiving an invalid response error after attempted log in. Any Ideas? EMS client packager version 7.4 patch 7.4.5   

Hi community, I have bought a used Fortigate 60E to work with SD-WAN. The port WAN2 not working (no sign of life) but my problem is the port WAN1 because it's working only Fast. My service provider router is Giga and my link is 500Mb. What is the problem? I count with your support Addtionals Informations:- The two WAN ports are 10/100/1000;- My firewall is up to date - version 7.0.12;- Memory and CPU used is OK;- When i tested the same cable on another port, it's works Giga (Today, it's my workaround);- When i forced the speed port to 1000, it's stop work; FortiGate#Fortigate60E

Maybe I'm missing something, but with the conversion from the old Fortinet forums to this new community software, is there no longer any categorization so you can simply read through threads on a topic of interest to see if any apply to you?  I used to regularly skim the product-specific sub forums for the Fortinet hardware/software we use to see if there were posts that would be of interest for either security or performance/optimization concerns.  I can't see any way to do that now, it's just an endless news feed style interface that takes up so much screen real estate you have to page forward every few posts, making it impossible to ever read through it.  There are literally 14,000 pages of content with four or six posts per page. I see where I can switch to threaded, and if I click into the right post from a random person first, I can then try to backtrack to a category that seems to exist, but still get this inflated post listing where I have to see the first p