Re: Forti config backup

vifi · 09-18-2025

Description This article describes why FortiGate is not including Certification Authority Key ID (AKID) when resigning certificates during SSL deep inspection. Scope FortiGate. Solution When FortiGate is performing SSL deep inspection on both flow mo...

vifi · 08-07-2025

Description This article describes the changes that should be made to a DLP profile after upgrading from 7.2 to 7.4 if the 'regex' type file is being used in a multi-VDOM environment. Scope FortiOS 7.2, 7.4. Solution Access to websites is not possibl...

vifi · 07-25-2025

Description This article describes how to resolve the 'certificate-probe-failed' error for mask-h2.icloud.com Scope FortiGate v7.4.x. Solution In Security Logs -> SSL logs, there are a lot of SSL-anomaly logs for mask-h2.icloud.com time=""07:15:31"""...

vifi · 06-23-2025

Description This article describes how it is not possible to search for the IP to which the FQDN is resolved to in the address field. Scope FortiGate. Solution Situation: Traffic to a specific destination IP (162.219.225.118) is being blocked by a fi...

vifi · 05-21-2025

Description This article describes a workaround for the issue when SSL exemptions are not working. Scope FortiGate v7.2.11 and v7.4.7, Solution SSL exemptions are configured as FQDN or web categories. One of the following changes should be made: Opti...

vifi · 01-31-2025

Hi, You can disable this signature in WAF profile.config waf profileedit "Profile_name"config signatureset disabled-signature 40000137

vifi · 01-31-2025

Hi, Could you please manually disable the Web Filter extension? restarting browserSet 0 in the EMS profile to automatically remove the already installed extension when it is disabled.

vifi · 01-31-2025

Hi, You can configure automation stitch.Please check KB below how to configure the automation stitch.https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-send-automated-backups-of-the-configuration/ta-p/198364If you have multi VDOM enviro...

vifi · 01-30-2025

Hi omkar0652,It doesn't exist a list of websites.However you can find some tests websites as below.FortiGuard Web Filtering Test Pagehttps://www.fortiguard.com/wftest/3.htmlhttps://www.fortiguard.com/wftest/x.html------------------------->>> you can ...

vifi · 01-30-2025

Hi,Yes, wildcard FQDN *.trendmicro.com will allow all subdomains of trendmicro.com.

User Statistics

User Activity

Technical Tip: FortiGate is not including AKID when resigning certificates during deep inspection

Troubleshooting Tip: Issues with accessing websites when DLP Profile is used, after upgrade form 7.2 to 7.4 in a multi-VDOM environment

Technical Tip: How to resolve 'certificate-probe-failed' error for mask-h2.icloud.com

Troubleshooting Tip: Searching for the IP which FQDN is resolved to in the address field

Technical Tip: SSL exemptions are not working

Re: Custom FortiGate WAF signature act as an exception list - doesn't work

Re: forticlient Webfilter chrome plugin - slowwww