Technical Tip: How to allow an LDAP user to change...

Sheikh · 04-25-2025

Description This article explains how admins can keep the network secure and compliant by monitoring configuration changes as they happen in the FortiNAC environment. Scope FortiNAC or FortiNAC-F (any version). Solution In business-critical environme...

Sheikh · 09-30-2024

Description This article describes how to allow changing an LDAP user account password via the self-service portal in FortiAuthenticator. Scope Windows Active Directory Domain Controllers, FortiAuthenticator - Any version, Web Browser: Any version. S...

Sheikh · 06-18-2024

Description This article explains how to address two specific scenarios involving SSL VPN in FortiGate: A new domain account has been created with the option 'User must change password at first logon' enabled. The password of an existing domain user ...

Sheikh · 12-27-2023

Description This article describes how to add an HTTPS certificate in FortiPAM for administrative access. Scope Any supported version of FortiPAM. Solution This article will use the following Fortinet products: FortiPAM: Firmware version 1.1.2. Forti...

Sheikh · 12-23-2023

Description This article describes how to configure a Global Catalog server port in LDAP configurations for FortiGate, FortiProxy, and FortiAuthenticator. Scope FortiGate, FortiProxy, and FortiAuthenticator. Solution In order to create a single LDAP ...

Sheikh · 05-12-2025

Hello @newbietonac The FortiNAC Persistent Agent determines which server to connect to using a specific order of priority. This sequence ensures optimal connectivity, especially in environments with multiple FortiNAC servers. The official Fortinet do...

Sheikh · 04-21-2025

Hello @ikhtiyor Have you checked this technical document ? https://community.fortinet.com/t5/FortiGate/Technical-Tip-IPsec-Dialup-tunnel-using-IKEv2-with-FortiToken/ta-p/382760 regards, Sheikh

Sheikh · 03-25-2025

Hello @roberto_papa With this limited information, it would be difficult to provide or suggest next action plans. regards, Sheikh

Sheikh · 03-17-2025

Hello @jbrines These are just two different firmwares of FortiNAC. Fortinac 9.X uses CentOS Fortinac 7.X is available with CentOS or FortiNACOS. Development will be limited to FortiNAC OS in the future.The FortiNAC operating system does not support d...

Sheikh · 03-17-2025

Hello @Gul , What are the debug logs from FortiGate show ? diagnose debug resetdiagnose debug application fnbamd -1diag vpn ssl debug-filter src-addr4 x.x.x.x (Replace x.x.x.x with the IP address of the PC connected to the SSL VPN, the one give by th...

User Statistics

User Activity

Technical Tip: Event-based monitoring and auditing of FortiNAC configuration changes by admins

Technical Tip: How to enable LDAP users to change their password at first login or reset an expired password through the FortiAuthenticator Self-Service Portal