So the client being unable to resolve the ZTNA address has nothing to do
with the FortiGate, this configuration comes from the EMS server that is
then pushed to the FortiClient, so first thing is to check the ZTNA
configuration there. Are you able to...
So there's been improvements in FortiClient 7.2.X with the ZNTA where it
now doesn't change anything in the hosts file, instead it uses a DNS
proxy to intercept ZTNA requests, this is why you won't see any changes
in FortiClients running 7.2 but will...
So when a FAZ is in collector mode it's got unlimited GB/day of logs.
This means you can purchase the smallest GB/day license (FAZ-VM-GB1) for
the collectors. For the FAZ in analyzer mode you need to license it
based on the total GB/day for analytics...
That metric is Mpps (Millions of packets per second) not Mbps (Megabits
per second). The metric is for the amount of packets it can process, not
the throughput (which is 4Gbps). If you're looking at the DDOS you
should look at the 200F instead of 200...
This has been implemented in 7.4.1:
https://docs.fortinet.com/document/fortigate/7.4.0/new-features/108890/add-fortiguard-web-filter-categories-for-ai-and-cryptocurrency-7-4-1