Re: Forti config backup

vifi · 11-25-2025

Description This article describes that currently FortiProxy and Explicit Web Proxy do not support CRL distribution when resigning the certificate with deep inspection in use. Scope FortiProxy/Explicit Web Proxy. Solution FortiProxy or Explicit Web P...

vifi · 10-22-2025

Description This article describes how to fix the issue when the DLP profile is not blocking .docx and .xlsx file formats. Scope FortiGate. Solution Note: .doc and .xls files are getting blocked as expected. Configuration: config dlp filepattern edit...

vifi · 09-18-2025

Description This article describes why FortiGate is not including Certification Authority Key ID (AKID) when resigning certificates during SSL deep inspection. Scope FortiGate. Solution When FortiGate is performing SSL deep inspection on both flow mo...

vifi · 08-07-2025

Description This article describes the changes that should be made to a DLP profile after upgrading from 7.2 to 7.4 if the 'regex' type file is being used in a multi-VDOM environment. Scope FortiOS 7.2, 7.4. Solution Access to websites is not possibl...

vifi · 07-25-2025

Description This article describes how to resolve the 'certificate-probe-failed' error for mask-h2.icloud.com Scope FortiGate v7.4.x. Solution In Security Logs -> SSL logs, there are a lot of SSL-anomaly logs for mask-h2.icloud.com time=""07:15:31"""...

vifi · 01-31-2025

Hi, You can disable this signature in WAF profile.config waf profileedit "Profile_name"config signatureset disabled-signature 40000137

vifi · 01-31-2025

Hi, Could you please manually disable the Web Filter extension? restarting browserSet 0 in the EMS profile to automatically remove the already installed extension when it is disabled.

vifi · 01-31-2025

Hi, You can configure automation stitch.Please check KB below how to configure the automation stitch.https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-send-automated-backups-of-the-configuration/ta-p/198364If you have multi VDOM enviro...

vifi · 01-30-2025

Hi omkar0652,It doesn't exist a list of websites.However you can find some tests websites as below.FortiGuard Web Filtering Test Pagehttps://www.fortiguard.com/wftest/3.htmlhttps://www.fortiguard.com/wftest/x.html------------------------->>> you can ...

vifi · 01-30-2025

Hi,Yes, wildcard FQDN *.trendmicro.com will allow all subdomains of trendmicro.com.

User Statistics

User Activity

Technical Tip: FortiProxy and Explicit Web Proxy resigned certificate do not support CRL

Technical Tip: How to block .docx and .xlsx file formats using DLP profile

Technical Tip: FortiGate is not including AKID when resigning certificates during deep inspection

Troubleshooting Tip: Issues with accessing websites when DLP Profile is used, after upgrade form 7.2 to 7.4 in a multi-VDOM environment

Technical Tip: How to resolve 'certificate-probe-failed' error for mask-h2.icloud.com

Re: Custom FortiGate WAF signature act as an exception list - doesn't work

Re: forticlient Webfilter chrome plugin - slowwww