Re: Forti config backup

vifi · 10-22-2025

Description This article describes how to fix the issue when the DLP profile is not blocking .docx and .xlsx file formats. Scope FortiGate. Solution Note: .doc and .xls files are getting blocked as expected. Configuration: config dlp filepattern edit...

vifi · 09-18-2025

Description This article describes why FortiGate is not including Certification Authority Key ID (AKID) when resigning certificates during SSL deep inspection. Scope FortiGate. Solution When FortiGate is performing SSL deep inspection on both flow mo...

vifi · 08-07-2025

Description This article describes the changes that should be made to a DLP profile after upgrading from 7.2 to 7.4 if the 'regex' type file is being used in a multi-VDOM environment. Scope FortiOS 7.2, 7.4. Solution Access to websites is not possibl...

vifi · 07-25-2025

Description This article describes how to resolve the 'certificate-probe-failed' error for mask-h2.icloud.com Scope FortiGate v7.4.x. Solution In Security Logs -> SSL logs, there are a lot of SSL-anomaly logs for mask-h2.icloud.com time=""07:15:31"""...

vifi · 06-23-2025

Description This article describes how it is not possible to search for the IP to which the FQDN is resolved to in the address field. Scope FortiGate. Solution Situation: Traffic to a specific destination IP (162.219.225.118) is being blocked by a fi...

vifi · 01-31-2025

Hi, You can disable this signature in WAF profile.config waf profileedit "Profile_name"config signatureset disabled-signature 40000137

vifi · 01-31-2025

Hi, Could you please manually disable the Web Filter extension? restarting browserSet 0 in the EMS profile to automatically remove the already installed extension when it is disabled.

vifi · 01-31-2025

Hi, You can configure automation stitch.Please check KB below how to configure the automation stitch.https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-send-automated-backups-of-the-configuration/ta-p/198364If you have multi VDOM enviro...

vifi · 01-30-2025

Hi omkar0652,It doesn't exist a list of websites.However you can find some tests websites as below.FortiGuard Web Filtering Test Pagehttps://www.fortiguard.com/wftest/3.htmlhttps://www.fortiguard.com/wftest/x.html------------------------->>> you can ...

vifi · 01-30-2025

Hi,Yes, wildcard FQDN *.trendmicro.com will allow all subdomains of trendmicro.com.

User Statistics

User Activity

Technical Tip: How to block .docx and .xlsx file formats using DLP profile

Technical Tip: FortiGate is not including AKID when resigning certificates during deep inspection

Troubleshooting Tip: Issues with accessing websites when DLP Profile is used, after upgrade form 7.2 to 7.4 in a multi-VDOM environment

Technical Tip: How to resolve 'certificate-probe-failed' error for mask-h2.icloud.com

Troubleshooting Tip: Searching for the IP which FQDN is resolved to in the address field

Re: Custom FortiGate WAF signature act as an exception list - doesn't work

Re: forticlient Webfilter chrome plugin - slowwww