Description This article describes how to enable 'httpmethod' and
'referrer url' parameters in the HTTP transaction logs for FortiAnalyzer
or syslog or FortiSIEM Scope ForitProxy. Solution The default HTTP
transaction logs in Fortiproxy do not includ...
Description This article describes how to update manually a Botnet
database in an air gap environment. Scope FortiGate. Solution Manually
updating the Botnet database in the air gap environment has been
combined with the Internet Service definition u...
Description This article describes how many FortiGates can be connected
to one FSSO Collector agent application for login information. Scope
FortiGate, FSSO. Solution The FSSO Collector agent is installed on the
Windows Server. It is possible to have...
Description Technical Tip-Duplicate session logs are seen in the forward
traffic logs for long live session packets. Scope Solution When a large
file from the Internet is uploaded, it is possible to notice multiple
forward logs with the same session ...
Description This article describes how to configure the LDAP users as
the Guest account provisioning sponsors. Scope FortiGate v6.4, v7.0,
v7.2., v7.4, v7.6. Solution Creating an LDAP Server. Creating a user
group using the configured LDAP server. Co...
Hi @mrmIT You must ensure that log events have been received by both
domain controllers Also verify you are monitoring both Domain controller
in the collector agent settings in DC01 /DC02. Regards Jamal Hussain
Hi, Please let us know if the collector agent is configured in active or
passive mode. Normally, the Fortigate connects to the primary FSSO agent
(DC agent 01) and retrieves the users showed in the logon user list. If
a user A appears in the user log...
Hi, The WAP2 Enterprise authentication occurs when the client joins the
SSID; following the successful four-way handshake and the client
receives the IP address and is able to browse, the device does not need
to be authenticated again. Client disconn...
Hi Have you configured firewall policy to allow traffic from SSID
interface to wan interface. You can run the below debug logs and check
the traffic is allowing by firewall policy diag debug flow filter addr
x.x.x.x ---where x.x.x.x is the IP address...
