Urgent Security Issues Affecting Our Business Operations

[juliaeldef548]

Hello Fortinet Community,

I’m seeking urgent assistance with some critical security issues that are affecting our business operations. My company deals with floor contracting, gas technician services, stucco repair, and golf club maintenance. We rely heavily on Fortinet solutions for network security and operational continuity, but we’ve been encountering several issues that are causing significant disruptions.

Background:

We use Fortinet’s security solutions to protect our network infrastructure, manage our IT resources, and ensure the security of sensitive client and project data. Recently, we’ve been facing several challenges that are impacting our ability to operate effectively and maintain our client relationships.

Details of the Issue:

1. Frequent Network Downtime: We’ve experienced frequent network downtimes which are affecting our ability to communicate with clients and access essential project management tools. This has led to delays in project schedules and difficulties in coordinating with our team and subcontractors.

2. Performance Degradation: Our network performance has significantly degraded, causing slow access to critical applications and files. This issue is impacting our productivity, especially when working with large files related to project plans and client specifications.

3. Security Alerts and False Positives: We’ve been receiving an increased number of security alerts and false positives from our Fortinet security appliances. This has led to confusion and unnecessary disruptions, as our IT team spends significant time investigating and addressing these alerts.

4. Integration Issues: Integrating Fortinet’s solutions with other tools and systems we use for project management and client interactions has been problematic. We’re encountering issues with data consistency and security settings, which are affecting our overall workflow.

Request for Assistance:

• Has anyone else encountered similar network performance and security alert issues with Fortinet solutions?
• Are there recommended configurations or best practices to optimize network performance and reduce false security alerts?
• What steps can we take to better integrate Fortinet’s solutions with our other business tools to ensure smooth operation?

Any insights or solutions from those who have experienced and resolved similar issues would be immensely helpful. Thank you in advance for your support!

[sprashant]

Hello,

What are the products that you use when you mention 'Fortinet's solutions'. If there are any issues with the Fortigate firewall, a simple way to check for any crash is to do "#diag debug crashlog read" on the CLI console. But this is still vague as you will have to identify what kind of issue you are facing and on which product in order for proceeding further.

In case, if the complete network sees a downtime then we can check the packet level drops at interface level (#diagnose hardware deviceinfo nic <interface name>)

But yes, my suggestion would be identify the products and what kind of issue you face on them.

[HiralShah]

Hello @juliaeldef548 

-Can you please provide detail information about which firmware version and device you are using?

-Also when you have network downtime did you notice any high cpu usage?--You will able to check that from logs & report > system event logs or diag deb crashlog read

-Are you having slowness issue when connecting to VPN or internal network as well?

-What kind of alrets you  are receiving is it for admin access of fortiGate? or someone trying to log into your VPN?--If the alerts are related to admin access you can check this document: https://community.fortinet.com/t5/FortiGate/Technical-Tip-System-administrator-best-practices/ta-p/1...

--For VPN access restriction : https://community.fortinet.com/t5/FortiGate/Technical-Tip-Restricting-allowing-sslvpn-access-from-sp...

-Also what kind of tools you are integrating with?

Please let us know.