Fortinet Community

Sheikh · 03-14-2023

Description This article describes how to enforce AES256-SHA1 in FortiGate with an explicit proxy setup. Scope FortiGate, Windows Domain controller. Solution It is assumed that explicit proxy configurations are already completed in FortiGate and the ...

Sheikh · 01-30-2023

Description This article describes how to enable users to re-provision their FortiToken Mobile or use temporary email or SMS tokens if the previously provisioned mobile device is lost or unavailable. Scope FortiAuthenticator, Self-Service portal, rep...

Sheikh · 01-22-2023

Description This article describes how to resolve these two scenarios with SSL VPN in FortiGate. - A new domain account with the following options enabled: 'User must change password at first logon'. Or - The password of any existing domain user acco...

Sheikh · 10-20-2022

Description This article describes the steps to create FSSO connector and enable FSSO Encryption between FortiAuthenticator and FortiGate using certificates. Scope FortiAuthenticator and FortiGate Solution - FortiAuthenticator uses TCP Port 8000 for ...

Sheikh · 10-17-2022

Description This article describes how to allow Smartcard PIN authentication using FortiAuthenticator agent version 4.x. Scope FortiAuthenticator Agent, Windows 10 & Windows 11. Solution In this case, FortiAuthenticator Agent 4.x is installed on Wind...

Sheikh · 03-10-2023

Hi Fabio, Are you using Forticlient for SSLVPN or IPSEC VPN ? Anyways in both cases debug logs on FortiGate will help you to give better insight of issue. For SSLVPN diag debug resetdiag debug console timestamp enablediag debug app fnbamd -1diag debu...

Sheikh · 03-10-2023

Hi Tutek, Please try the steps mentioned in the below KB article. https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-User-status-Not-Verified-on-the-FSSO/ta-p/195014 regards, Sheikh

Re: Unauthenticated user · 03-03-2023

Hi wismail, As you have mentioned that you are using "External connector", so are you using FSSO Agent on Domain controllers or do you have Collector Agent installed on a member server ? Did you configure any Groups filtering ? Is there any other fir...

Sheikh · 03-03-2023

Hi, to check whether the Forticlient service is UP & running # systemctl status forticlient.service If it is stopped, you can try to start it with following command. # systemctl start forticlient.service regards, Sheikh

Sheikh · 03-03-2023

Hi AhmedAyman99, Please also find some KB article regarding Fortiauthenticator clustering, that might help you in implementation and understanding. https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-FortiAuthenticator-HA-cluster-overv...

Fortinet Community

User Statistics

User Activity

Technical Tip: How to enforce Kerberos keytab with AES256-SHA1 as the used encryption method with Explicit Proxy

Technical Tip: Allow users to re-provision their FortiToken Mobile or use temporary email/SMS tokens

Technical Tip: How to allow LDAP user to change password at first logon or renew expired password via SSL VPN with FortiGate

Technical Tip: How to enable encrypted FSSO communication between FortiAuthenticator and FortiGate

Technical Tip: Smart card PIN authentication with FortiAuthenticator Agent 4.x

Re: Forticlient

Re: Help me configure FSSO with two DC

Re: Unauthenticated user

Re: Forticlient blank screen Ubuntu 18.04

Re: fortiauthenticator vm ha

Re: Domain name resolution site to site tunnel

Re: Fortigate unexpectedly reboot after removing S...

Technical Tip: How to allow LDAP user to change pa...

Re: Forticlient VPN v. 7.07.0345

Re: Benefits of using proxy policies vs firewall p...

Re: Firewall User Idle Time-Out