Welcome to the Fortinet Community!

Fortigate 7.6.7

I upgrade our fortigate to v7.6.7 and after upgraded then the web admin gui if use mgmt ip address can’t be accessed from advpn, only can be accessed from local site and from hub only. If i using lan ip (not mgmt) then i can access. Anyone know why?S

792

1 hour ago

F-ALIExplorer II

Recovering FortiGate 200F Admin Access Without Factory Reset

Hi everyone,We recently ended our support contract with our previous vendor and decided to renew with a different support provider.Unfortunately, the previous vendor has refused to provide the FortiGate administrator credentials and has also refused

mano972Explorer

RADIUS authentication fails for newly added switches after FortiNAC upgrade v7.6.7.0976

Hello,We are experiencing an issue with RADIUS authentication on FortiNAC after upgrading the appliance.The problem only affects newly added switches. Any switch that is added to the FortiNAC inventory after the upgrade is unable to authenticate via

HS08Visitor III

IP Phone profiling Registration

When i have a new ipphone connected to the network then fnac will move this ipphone to registration vlan before device profiling is running. After device profilling run then i can see the ipphone move to host role ‘IP Phone’ and registered’But after

GregWNew Member

Migrating from Palo Alto in Azure to Fortigate in Azure

Greetings,Looking for advice on best way to migrate from current Palo Alto in Azure to FortiGate.Can it be deployed into the same subnets, or does it need to be in new subnets same vnet?Thanks!-Greg

dabuvNew Member

Fortigate Explicit Proxy with Active Directory not matching user against policies using different DC

Hi there, I’m having issue with matching Fortigate Proxy Policies against user group membership using AD DC2. Currently I have Active Directory with 2 DC’s. I have separate ldap connections to them (because of scale of organization, and the need to g

mtseStaff

Technical Tip: Revision number of repeated auto update from FortiGate is not displayed in FortiManager configuration revision history

Description This article describes why some revision numbers in the Configuration Revision History of FortiManager are missing. Scope FortiManager. Solution Sometimes, not all revision numbers in the Configuration Revision History of a device

7991

8 hours ago

acardonaStaff

Troubleshooting Tip: Web-proxy is not following SD-WAN rule

Description This article describes the configuration to apply to the web-proxy to allow the web-proxy to follow the SD-WAN rules.ScopeFortiGate.SolutionThe default vrf value is -1, meaning it does not accept any SD-WAN interface selection. The VRF ID

340

JHelioStaff

Troubleshooting Tip: FortiClient EMS fabric connector to FortiGate is intermittent with 'Connection failed with unknown issue' error message

DescriptionThis article describes a solution for an intermittent connection with a FortiClient EMS fabric connector to FortiGate when the error 'Connection failed with unknown issue' is shown.ScopeFortiGate v7.2 and FortiClient EMS v7.2.SolutionSympt

330

K

KentCunnectNew Member

Can't connect with fortinet 7.2 managed with EMS and SAML on linux

I enrolled my forticlient with the EMS, it shows “connected”.When I try to connect to the VPN (SAML Login), it’s stuck “connecting”.Two problems come to mind:* It doesn’t show the SAML popup (auth through azure) as it does on windows.* when looking a

HS08Visitor III

I upgrade our fortigate to v7.6.7 and after upgraded then the web admin gui if use mgmt ip address can’t be accessed from advpn, only can be accessed from local site and from hub only. If i using lan ip (not mgmt) then i can access. Anyone know why?S

792

1 hour ago

F-ALIExplorer II

Recovering FortiGate 200F Admin Access Without Factory Reset

Hi everyone,We recently ended our support contract with our previous vendor and decided to renew with a different support provider.Unfortunately, the previous vendor has refused to provide the FortiGate administrator credentials and has also refused

mano972Explorer

RADIUS authentication fails for newly added switches after FortiNAC upgrade v7.6.7.0976

Hello,We are experiencing an issue with RADIUS authentication on FortiNAC after upgrading the appliance.The problem only affects newly added switches. Any switch that is added to the FortiNAC inventory after the upgrade is unable to authenticate via

HS08Visitor III

IP Phone profiling Registration

When i have a new ipphone connected to the network then fnac will move this ipphone to registration vlan before device profiling is running. After device profilling run then i can see the ipphone move to host role ‘IP Phone’ and registered’But after

GregWNew Member

Migrating from Palo Alto in Azure to Fortigate in Azure

Greetings,Looking for advice on best way to migrate from current Palo Alto in Azure to FortiGate.Can it be deployed into the same subnets, or does it need to be in new subnets same vnet?Thanks!-Greg

stejacarNew Member

How can I verify that my DNSBL configuration is working correctly on FortiMail?

Hi everyone,I have configured DNSBL under Profile > AntiSpam > AntiSpam on my FortiMail.I'd like to verify whether the DNSBL configuration is actually working as expected. Is there a way to confirm this from the FortiMail side?Specifically, I'm

151

10 hours ago

MG4Explorer III

FortiEndpoint FortiXDR without FAZ Cloud

Hi everyone,I'm currently setting up FortiXDR and I'm a bit confused about the required FortiAnalyzer configuration.Our environment consists of:FortiClient EMS Cloud FortiXDR license Local FortiAnalyzer VM (no FortiAnalyzer Cloud license)We do not ha

151

10 hours ago

fabs-netExplorer III

FortiSwitch NMS - Best practices?

Hi all,just started my first FortiSwitchNMS deployment with about 50 FortiSwitch Rugged at a customer site and am now planning further steps to improve the whole setup.Since the product is quite new and community resources are limited, I wanted to re

311

11 hours ago

GallearNew Member

3M PRF UMDF USB driver

Since deploying FortiClient 7.4.7 some users are reporting that external USB scanners and web cams are no longer working. In device manager we are seeing error code 19. We are assuming that this is linked to the known bug around the 3M PRF UMDF USB

401

11 hours ago

FortiEng_345Explorer III

Install FortiClient Installer from EMS Cloud to Windows PCs automatically without need to enter Invitation code

Hi everyone,Is it possible to register the FortiClient to EMS Cloud without needing the invitation code. We have more than 300 PCs to install the client and we dont want to enter the invitation to each of them. Bests,FortiEng

281

12 hours ago

mtseStaff

FortiManager

Technical Tip: Revision number of repeated auto update from FortiGate is not displayed in FortiManager configuration revision history

Description This article describes why some revision numbers in the Configuration Revision History of FortiManager are missing. Scope FortiManager. Solution Sometimes, not all revision numbers in the Configuration Revision History of a device

7991

8 hours ago

acardonaStaff

Troubleshooting Tip: Web-proxy is not following SD-WAN rule

Description This article describes the configuration to apply to the web-proxy to allow the web-proxy to follow the SD-WAN rules.ScopeFortiGate.SolutionThe default vrf value is -1, meaning it does not accept any SD-WAN interface selection. The VRF ID

340

JHelioStaff

Troubleshooting Tip: FortiClient EMS fabric connector to FortiGate is intermittent with 'Connection failed with unknown issue' error message

DescriptionThis article describes a solution for an intermittent connection with a FortiClient EMS fabric connector to FortiGate when the error 'Connection failed with unknown issue' is shown.ScopeFortiGate v7.2 and FortiClient EMS v7.2.SolutionSympt

330

Troubleshooting Tip: Troubleshooting a failed FortiEDR XDR connector test

aguevara16Staff

FortiEDR

DescriptionThis article describes troubleshooting steps for resolving a Failed Test between FortiEDR and FortiAnalyzer when configuring eXtended integration connectors.ScopeFortiEDR, FortiAnalyzer.SolutionFortiEDR allows integration with FortiAnalyze

30

10 hours ago

srahmatStaff

FortiMail

Troubleshooting Tip: Unable to use specific SMTP greeting HELO/EHLO name (as client)

DescriptionThis article describes how to troubleshoot whether the FortiMail is unable to use specific SMTP greeting HELO/EHLO name (as a client).ScopeFortiMail.SolutionFortiMail has features to set specific SMTP greeting (EHLO/HELO) names when FortiM

70

Technical Tip: Reasons an endpoint shows an outdated IP address in FortiClient EMS

alyaStaff

FortiClient

DescriptionThis article describes why the IP address displayed for an endpoint in FortiClient EMS may not immediately reflect the endpoint's current network address.ScopeFortiClient EMS v7.x.SolutionFortiClient EMS displays the IP address reported by

90

Technical Tip: How to configure FortiMail to block or quarantine the incoming emails that contain attachment without password protected

cysawStaff & Editor

FortiMail

DescriptionThis article describes how to configure FortiMail to block or quarantine incoming emails that contain attachments without a password protected.ScopeFortiMail.SolutionCreate a new filter.Follow the steps below to configure the file filter p

90

Troubleshooting Tip: How to use Windows machine command prompt to retrieve DMARC record using specific DNS server

cysawStaff & Editor

FortiMail

DescriptionThis article describes how to use the Windows machine command prompt to retrieve a DMARC record using a specific DNS server.ScopeFortiMail.SolutionOpen the Windows Machine Command Prompt.Run the command below to retrieve the DMARC record u

110

jiahoong112Staff

Troubleshooting Tip: FortiWiFi built-in Access Point remains Online on SNMP server even after radios are disabled

DescriptionThis article describes an issue where FortiWiFi's built-in wireless access point shows up as online even after disabling the radios. This causes Network Monitoring Systems to report that the FortiWiFi’s built-in Wireless Access Point is st

570

Technical Tip: Reasons that the FortiSandbox VM analysis does not terminate within the timeout limit set

pcheeStaff

FortiSandbox

DescriptionThis article describes why FortiSandbox VM analysis does not terminate within the timeout limit set.ScopeFortiSandbox.SolutionThe timeout configuration is set on Scan Policy and Object -> Scan Profile -> Advanced.Analysis for Job Det

70