Technical Tip: FortiAnalyzer use webhook to send a...

smkml · 04-01-2024

Description This article describes the way the incident information shown in FortiView -> Threats -> Top Threats is triggered based on a session ID count of how many times a given threat occurs. The incidents are not a cumulative log of each threat i...

smkml · 04-01-2024

Description This article describes how to troubleshoot an issue where the user is unable to import a policy package due to the error 'Device mapping:: "query failed"'. Most of the time, this issue occurs when importing a large amount of policies into...

smkml · 03-22-2024

Description This article describes how to view information regarding lte-modem RSSI score information if it is not showing in Extender Manager. This is only applicable if FortiGate is a 3G4G model and the information is not limited to RSSI but is inc...

smkml · 02-20-2024

Description This article describes how to send an alert message to Slack application from FortiAnalyzer. Scope FortiAnalyzer, Slack. Solution Slack: Login to the Slack account, or create a new account and create a workspace: Create a new channel wh...

smkml · 02-20-2024

Description This article describe how to re-join the cluster device correctly after it added when HA member auto grouping are disable. By design, if an HA cluster device is added to FortiAnalyzer it will only need to authorize the Primary, but since ...

smkml · 04-18-2024

Hi @Leuchtturm , Try to remove the device on the FortiManager, and try to add it again from the FortiGate by followed the document below:https://docs.fortinet.com/document/fortigate/7.2.4/administration-guide/697989/configuring-central-managementAdd ...

smkml · 04-17-2024

Hi @shahanajb , It seems like the logs for Security Event (IPS) are not present in FGT itself. Make sure that Security Profile (IPS) are enabled in your policies, and the logs are enabled.

smkml · 04-07-2024

Hi @kyle-hsuan , Yes, you can. By added the devices into the installation target of the policy package.

smkml · 04-06-2024

Hi @PRosenlind , The supported System Interface and Device Database variables are shown in top of the article.https://docs.fortinet.com/document/fortimanager/7.4.2/administration-guide/906193/using-fortimanager-device-database-variables-in-jinja

smkml · 04-03-2024

Hi @kyle-hsuan , This is expected behavior in Global Database, since no device managed under the ADOM and you cannot per-device mapped it. The feasible way to normalized interface is after created the policies and assigned to your ADOM.

User Statistics

User Activity

Technical Tip: Incidents in FortiView triggered based on session ID

Troubleshooting Tip: Unable to import policy package due to error 'Device mapping:: "query failed"'

Technical Tip: Unable to view LTE-modem RSSI score information in Extender Manager

Technical Tip: FortiAnalyzer use webhook to send alert to Slack

Technical Tip: Re-add HA cluster device in FortiAnalyzer due to HA member auto-grouping disable

Re: Adding HA Cluster of two 60F to Fortimanager 7.2.5

Re: Not showing intrusion prevention in FortiGate under log view in Forti analyzer

Re: FortiManager ADOM GlobalDatabase How to Normalized Interface

Re: FortiManager DeviceDB information into Jinja templates

Re: FortiManager ADOM GlobalDatabase How to Normalized Interface

Technical Tip: FortiAnalyzer use webhook to send a...

Technical Tip: FortiManager Cloud option not avail...

Troubleshooting Tip: Security logs in All Types/Su...

Technical Tip: Metadata variables are not supporte...

Technical Tip: Download the Postgres Schema Databa...

Re: FortiManager ADOM GlobalDatabase How to Normal...

Re: Fortimail -> SMTPUTF8

Re: Second port and IP address for Fortiportal

Re: FortiManager keeps removing source-ip for Radi...

Re: FortiAnalyzer FortiView "Server error: ERROR: ...

KCS