Technical Tip: EAP_Proxy consuming high CPU after ...

kcheng · 02-06-2025

Description This article explains the definition of 'Branches to fix' corresponding to the CVSS score. Scope All FortiOS. Solution Fortinet PSIRT policy defines the 'Branches to fix' based on the CVSS score assigned to a specific vulnerability. The f...

kcheng · 01-16-2025

Description This article describes the issue where users cannot renew their password when connecting to IPSec VPN using FortiClient. Scope FortiClient v7.4.1, v7.4.2, v7.2.6. v7.2.7. Solution Administrators can enable password renewal for IPSec VPN u...

kcheng · 12-27-2024

Description This article describes the troubleshooting steps when a user fails to authenticate via the 802.1x method due to the expiry of the EAP certificate. Scope FortiAuthenticator. Solution An EAP Server certificate is mandatory when the authenti...

kcheng · 11-18-2024

Description This article describes the steps to mitigate a split-brain issue of FortiGate HA that has been deployed in FortiGate Clustering Protocol (FGCP) implementation. Scope FortiOS 7.6.0. Solution In traditional FGCP HA implementation, FortiGate...

kcheng · 10-10-2024

Description This article describes the default behavior change for the auto-firmware-upgrade feature in FortiOS 7.4.5/7.6.0. Scope FortiOS 7.4.5/7.6.0 and above. Solution The default behavior of automatic firmware upgrades has been changed with the i...

kcheng · 06-09-2024

Hi @Lloyd3 There are no changes as of now. The limitation is indeed on the platform itself where the VPN settings can only be configured via the native VPN connection: https://docs.fortinet.com/document/forticlient/7.2.0/ios-administration-guide/5975...

kcheng · 04-04-2024

Hi @yeowkm99 You may also want to verify if your agent version is compatible with FOS 7.2.7: https://docs.fortinet.com/document/fortigate/7.2.7/fortios-release-notes/242321/product-integration-and-support Do note that agent version 5.0 build 0312 and...

kcheng · 01-25-2024

Hi @nwt Besides from what was already provided by AEK, if you would like to obtain application signatures officially from FortiGuard team, please use the following web form to submit the request and/or sample of the application so that the backend te...

kcheng · 01-25-2024

Hi @nneul Unfortunately, that is not possible. You may refer to the following article: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Constant-changing-of-password-and-encrypted/ta-p/258874 The reason behind this is that if the enc value r...

kcheng · 01-10-2024

Hi @luca1994 In this scenario, I would recommend to check on the following: 1. Is the connectivity between FortiGate to your DNS server made possible? You can check with running the following command to check on your FortiGate: exec ping exec ping ...

User Statistics

User Activity

Technical Tip: Explanation of 'Branches to fix' version in Fortinet PSIRT Policy

Technical Tip: Unable to perform password renewal through FortiClient with IPsec VPN

Troubleshooting Tip: Troubleshooting connection issue due to expired EAP certificate

Technical Tip: Mitigation of split brain issue when heartbeat interface is down

Technical Tip: Behavior changed for auto-firmware-upgrade feature in FortiOS 7.4.5/7.6.0

Re: IPSec VPN on forticlient mobile app on IOS ?

Re: FSSO group is not showing anything

Re: Peacock Network

Re: Is there any way to get consistent/repeatable "set password ENC" and "set private

Re: Unresolved FQDN wildcar object

Technical Tip: EAP_Proxy consuming high CPU after ...

Technical Tip: FortiGate HA failover due to memory...

Re: cannot longer connect FortiClientVPN 7.2.2.01...

Troubleshooting Tip: FortiGate Azure showing 'virt...

Technical Tip: Explanation of 'Branches to fix' ve...

Re: Is there any way to get consistent/repeatable ...

Re: Fortigate 100F Cannot access internet

Re: SD-WAN Manual Policy

Re: Configure FortiGate SDWAN in vdom mode

Re: Static routes redistribition over OSPF

KCS

User Statistics

User Activity

You are leaving our website