Welcome to the Fortinet Community!

Not able to select remote subnet by named address in static routes

Setting up an IPSec VPN Tunnel between a Fortigate 90g and another device. On the Fortigate, I setup the tunnel, settings are good.Setup the firewall policies, I see the created network names (local_subnet_1 and remote_subnet_2) that the Fortigate c

31

3 minutes ago

HS08Contributor III

Server certificate Not trusted

Randomly i got complain from user that they loss access to the network, and if i check on the fnac i got error belowand from endpoint o got this errorIs the error because the fnac wrong send the server certificate? If i replug the LAN cable then the

20

6 minutes ago

zoah666New Member

FortiEDR crashes PC's with docks attached

We have a strange scenario popping up in the lab for the new EDR deployments we were consulted to explore.Everything works normally except for when a USB dock is or SD card reader as it immediately crashes the computerRebooting the with the dock plug

60

1 hour ago

JoeMoeNew Member

VPN disconnects by Screensaver or screen lock

Hi, does anyone found a solution, to hold the VPN up and running when the screen is locked? OS: MacOS Sequoia 15.4 and MacOS Sequoia 15.5FortiClient: VPN 7.4.3.1761I had to install the newest FortiClient VPN version after a firewa

2930513

T

1 hour ago

yashi43New Member

Forticlient EMS 7.4.8 build2245

HiI have a ticket with Fortinet in regards invitation emails from Forticlient EMS when creating invitations with custom install file for example 7.2.15 the text in the email says version 7.4 and download links points to exe file with capital letters

121

2 hours ago

manasacStaff

FortiAnalyzer

Technical Tip: How to generate an event when an FGFM tunnel remains down beyond a specified duration

DescriptionThis article describes how to configure an event handler for an event when an FGFM tunnel remains down beyond a specified duration and send a notification.ScopeFortiAnalyzer.SolutionCreate a mail server from System Settings -> Advanced

80

ftrapaniStaff

Technical Tip: LLDP neighbor limits for FortiOS

DescriptionThis article explains the LLDP neighbor limits for FortiOS and how the device behaves when these limits are exceeded. ScopeFortiOS v7.2+.SolutionLLDP protocol can be used by any device in a LAN segment to advertise its presence and its ca

360

Fortinet Community Experience

Kate_MCommunity Manager

Mark a Best Answer

This week we’re looking at ‘best answers’ on Community. When you ask a question there are often (and hopefully!) various replies. Here’s what happens when you mark a ‘best answer’ - Everyone benefits from being able to see the solution to the probl

300

H

HoushicNew Member

FortiGate Cloud log uploading suppressed on FortiOS 7.4.11 with Basic subscription

Hi Fortinet Community,We are facing an issue with FortiGate Cloud logging on a FortiGate-100F.Device details:Model: FortiGate-100F FortiOS: 7.4.11 build 2878 Deployment: Standalone / NAT mode FortiCloud subscription: Basic/Free FortiCloud retention:

191

5 hours ago

K

Keisueke MoriVisitor II

FortiOS 8.0.0 MAP-E rejects JPIX v6 Plus DHCPv6-PD prefix as “invalid end user prefix”

Hello, I am testing dynamic MAP-E connectivity on a FortiGate-100F running FortiOS 8.0.0 build 0167. The Internet service is So-net over the NTT East FLET'S network in Japan. The VNE service appears to be JPIX “v6 Plus.” DHCPv6-PD is working. The For

622

6 hours ago

S

srentonNew Member

Not able to select remote subnet by named address in static routes

Setting up an IPSec VPN Tunnel between a Fortigate 90g and another device. On the Fortigate, I setup the tunnel, settings are good.Setup the firewall policies, I see the created network names (local_subnet_1 and remote_subnet_2) that the Fortigate c

31

3 minutes ago

HS08Contributor III

Server certificate Not trusted

Randomly i got complain from user that they loss access to the network, and if i check on the fnac i got error belowand from endpoint o got this errorIs the error because the fnac wrong send the server certificate? If i replug the LAN cable then the

20

6 minutes ago

zoah666New Member

FortiEDR crashes PC's with docks attached

We have a strange scenario popping up in the lab for the new EDR deployments we were consulted to explore.Everything works normally except for when a USB dock is or SD card reader as it immediately crashes the computerRebooting the with the dock plug

60

1 hour ago

yashi43New Member

Forticlient EMS 7.4.8 build2245

HiI have a ticket with Fortinet in regards invitation emails from Forticlient EMS when creating invitations with custom install file for example 7.2.15 the text in the email says version 7.4 and download links points to exe file with capital letters

121

2 hours ago

Kate_MCommunity Manager

Fortinet Community Experience

Mark a Best Answer

This week we’re looking at ‘best answers’ on Community. When you ask a question there are often (and hopefully!) various replies. Here’s what happens when you mark a ‘best answer’ - Everyone benefits from being able to see the solution to the probl

300

H

HoushicNew Member

FortiGate Cloud log uploading suppressed on FortiOS 7.4.11 with Basic subscription

Hi Fortinet Community,We are facing an issue with FortiGate Cloud logging on a FortiGate-100F.Device details:Model: FortiGate-100F FortiOS: 7.4.11 build 2878 Deployment: Standalone / NAT mode FortiCloud subscription: Basic/Free FortiCloud retention:

191

5 hours ago

K

Keisueke MoriVisitor II

FortiOS 8.0.0 MAP-E rejects JPIX v6 Plus DHCPv6-PD prefix as “invalid end user prefix”

Hello, I am testing dynamic MAP-E connectivity on a FortiGate-100F running FortiOS 8.0.0 build 0167. The Internet service is So-net over the NTT East FLET'S network in Japan. The VNE service appears to be JPIX “v6 Plus.” DHCPv6-PD is working. The For

622

6 hours ago

C

csmgrNew Member

DNS filter is wrongly blocked Hong Kong Goverment Website

Although I have already whitelisted https://www.immd.gov.hk/, I would like to know why FortiGate DNS Filter categorized https://www.immd.gov.hk/ as a phishing website?

261

7 hours ago

J

jeffPhil01New Member

FortiGate-VM: local-in traffic from VTI tunnel silently dropped (fw_local_in_handler, policy 0) — everything else works

Environment2x FortiGate-VM64-KVM, v8.0.0, build0167 (GA.F) License Status: Invalid (permanent-trial / unlicensed mode — not a normal 15-day FortiCloud eval) Lab topology: two sites connected via two independent ISP paths, each carrying one IPsec VTI

673

8 hours ago

M

mjleeNew Member

GUI bug: Last firewall policy duplicates and displays at the top during loading on FortiOS 7.6.7

Subject:[FortiOS 7.6.7] Policy GUI infinite loading and missing policies in By-Sequence viewDescription:We currently have a total of 514 firewall policies (Policy IDs 2 through 515). Due to a GUI bug causing an infinite loading loop, we switched

521

M

9 hours ago

manasacStaff

FortiAnalyzer

Technical Tip: How to generate an event when an FGFM tunnel remains down beyond a specified duration

DescriptionThis article describes how to configure an event handler for an event when an FGFM tunnel remains down beyond a specified duration and send a notification.ScopeFortiAnalyzer.SolutionCreate a mail server from System Settings -> Advanced

80

ftrapaniStaff

Technical Tip: LLDP neighbor limits for FortiOS

DescriptionThis article explains the LLDP neighbor limits for FortiOS and how the device behaves when these limits are exceeded. ScopeFortiOS v7.2+.SolutionLLDP protocol can be used by any device in a LAN segment to advertise its presence and its ca

360

pjangStaff & Editor

Technical Tip: FortiGate unable to access several FortiGuard services due to CRL scope errors (September 2026)

DescriptionThis article provides information on a recent issue (reported 2026-09-09) where FortiGates are unable to access several FortiGuard services that utilize certificates signed by DigiCert High Assurance EV Root CA.ScopeFortiGate.SolutionWhen

55970

13 hours ago

atahirStaff

Troubleshooting Tip: VPN Passthrough Sessions Remain Active After Routing Failover

DescriptionThis article describes how existing VPN passthrough sessions may remain active and continue using their original session state following a routing failover between sites. Even though the routing table updates to reflect the new path, estab

1610

Technical Tip: Configuring an OpenLDAP server on Ubuntu for FortiAuthenticator lab testing

srajeswaranStaff

FortiAuthenticator

DescriptionThis article describes how to configure a basic OpenLDAP server on Ubuntu for testing LDAP integration with FortiAuthenticator and reproducing LDAP-related behavior in a lab.ScopeFortiAuthenticator.SolutionThis example uses an OpenLDAP ser

110

Troubleshooting Tip: Multiple LDAP users appear as a single remote user in FortiAuthenticator

srajeswaranStaff

FortiAuthenticator

DescriptionThis article describes why multiple LDAP users may appear as a single remote user in FortiAuthenticator when the LDAP user object class and username attribute are mapped to group attributes.ScopeFortiAuthenticator.SolutionWhen configuring

130

Aman_TStaff

Troubleshooting Tip: IPsec remote VPN authentication does not work with TACACS+

DescriptionThis article describes a technical solution to the issue where IPsec Remote VPN authentication does not work with TACACS+ on FortiGate devices. The user is unable to authenticate using TACACS+ groups, while local user groups work as expect

1570

Technical Tip: Troubleshooting ICAP Adapter When File Submission Stops on FortiSandbox

alyaStaff

FortiSandbox

DescriptionThis article describes how to collect diagnostic information when the ICAP adapter stops receiving or processing file submissions on FortiSandbox.In some situations, file submission through the ICAP adapter may stop unexpectedly. The ICAP

90

Technical Tip: FortiSwitch PoE not working, showing PSE controller 0xff

laltuzarStaff

FortiSwitch

DescriptionThis article describes a scenario where a FortiSwitch PoE-enabled model shows all ports as Disabled in get switch poe inline output, even though the configuration is at default and no explicit PoE disable commands are present.ScopeFortiSwi

120

Troubleshooting Tip: FortiAP 6GHz radio shows channel 0 and 'channel usable: disabled' despite correct configuration

laltuzarStaff

FortiAP

DescriptionThis article describes when an AFC-supported FortiAP is configured in outdoor mode and deployed in a country without AFC service (e.g., Mexico), the 6GHz radio stays disabled — showing channel usable: disabled, channel: 0, and the 6GHz VAP

1370