Description This article describes that the local Certificate is not
selectable under SSL VPN settings, even though it is imported correctly
Scope FortiGate v7.x.x+. Solution It is possible to run into a scenario
where the Local Certificate is import...
Description This article describes how to ensure that the firewall will
not respond to or forward IPv6 traffic. Scope FortiOS 7.x.x. Solution
Sometimes, it is required to entirely disable IPv6 from the firewall for
regulatory purposes. When disabling...
Description This article describes the circumstances surrounding an
issue where the user is unable to enable FortiAnalyzer Cloud, even with
the correct entitlement. Scope FortiOS 6.2.x. Solution Even though the
user has the proper entitlement for For...
Description This article describes how to install FortiGate VM on
Proxmox. Scope FortiGate KVM 7.x.x+. Solution Proxmox is an open-source
enterprise-grade hypervisor which uses KVM as a backend for
virtualization. This makes it a suitable choice for ...
Description This article describes the scenario where FortiClient has
been uninstalled but the user is still getting 'A more recent version of
FortiClient is already installed' when trying to install a previous
version. Scope FortiClient v7.x.x, v6.x...
Just wanna confirm, for the existing group you currently have is using
Duo via RADIUS? Then the new group for Maintenance will be SAML? In this
case yeah it would be fine. The regular non SAML users will sign in as
normal on the Web Portal, but the M...
It's not clear what you are expecting an API to do in this case. Are you
trying to access an API via ZTNA, or somehow authenticate via an API? If
you are trying to access an API through ZTNA, it would be the same as a
regular web page with the HTTPS ...
It is not possible to only restore the config on one unit at a time, it
will always restore the config to both.You can separate the cluster then
restore the config on each one.
Split-tunneling is the correct way to solve this issue. It will do
exactly as you say, only 'internal' traffic that needs to go over the
VPN will be sent over the tunnel. Regular internet traffic like their
VOIP software will go out their local inter...
It seems like the commands seen in this article will solve your issue:
https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-How-to-fix-the-error-Internal-invalid/ta-p/209430