Welcome to the Fortinet Community!

Event Name Overwrite Issue in FortiSIEM 7.5.1

Hello FortiSIEM Community,I am developing a custom parser for a log source where both the Event Name and Event Type are dynamic strings extracted directly from the CEF log headers using regular expressions.We recently upgraded our environment from v7

211

KT06Visitor III

FortiSIEM 7.5 Headless Windows Agent: Host Discovered but No Event Logs

Issue: I’m deploying the FortiSIEM 7.5.0 Headless Windows Agent on a Windows machine in an OT environment. The communication path is Headless Agent → Diode Collector → L2.5 Virtual Collector → Supervisor. The Windows agent installation completes succ

91

Technical Tip: Import specific FortiClient VPN profile without losing other VPN profiles

dbhavsarStaff

FortiClient

Description This article describes how to import a specific FortiClient VPN profile to FortiClient without affecting/losing other profiles. Scope FortiClient Solution As per the below screenshot, currently, there is only one profile configure

Jirka1Explorer II

FortiOS 7.6.7 – Significant increase in daily log volume sent to FortiAnalyzer without configuration changes

Hi,after upgrading our FortiGate HA cluster from 7.4.12 to 7.6.7, we noticed a significant increase in the daily log volume sent to FortiAnalyzer.Environment:FortiGate: 2x FG-200F in HAFortiOS: 7.6.7FortiAnalyzer: VM, currently 8.0.0Logging: FortiAna

593

22 hours ago

VDOM001Explorer

I can't change the HA's Device Priority.

Regarding a FortiGate system configured in an active/standby high-availability (HA) setup,we initially set the Device Priority value for Unit 1 to 200 and the Device Priority value for Unit 2 to 128 (the default).However, even though we hadn’t made a

JasonXXVisitor II

IPv6 Best Security Practices for Beginner

How to Protect Fortigate from IPv6 Security Risks

312

mumbles202New Member

Redundant VPNs between a pair of FGTs

Working on a branch office to HQ redundant vpn setup. Each location has 2 ISPs and I had planned on following this: Manual redundant VPN configuration | FortiGate / FortiOS 8.0.0 | Fortinet Document Library just using 2 tunnels (primary ISP to prima

331

kyoneda1Staff

Technical Tip: Introduction of Server Certificate Verification for Virtual Server and ZTNA Access Proxy

Description This article describes the addition of a server certificate verification capability for Virtual Server and ZTNA Access Proxy in FortiOS. Scope FortiOS. Solution Starting in FortiOS v7.4.9 and v7.6.3, FortiGate introduces a new cap

3601

pawelsExplorer

How to download FortiAnalyzer clickhouse schema file

Where I can find click house schema file for FortiAnalyzer ?According to docs.fortinet.com:Each log table stored in an SQL database contains log fields that can be used in datasets.You can view a full list of the fields available for each log type in

111

Umer221Staff

Technical Tip: How to determine the web filter category of a website or domain

Description This article describes how to identify the web filter category of a website or domain. This step is crucial for effectively utilizing the web filter feature in FortiGate. Scope FortiOS, FortiGate, Web Filter, FortiGuard. Solution

322111

D

DheerajKambleVisitor II

Event Name Overwrite Issue in FortiSIEM 7.5.1

Hello FortiSIEM Community,I am developing a custom parser for a log source where both the Event Name and Event Type are dynamic strings extracted directly from the CEF log headers using regular expressions.We recently upgraded our environment from v7

211

KT06Visitor III

FortiSIEM 7.5 Headless Windows Agent: Host Discovered but No Event Logs

Issue: I’m deploying the FortiSIEM 7.5.0 Headless Windows Agent on a Windows machine in an OT environment. The communication path is Headless Agent → Diode Collector → L2.5 Virtual Collector → Supervisor. The Windows agent installation completes succ

91

Jirka1Explorer II

FortiOS 7.6.7 – Significant increase in daily log volume sent to FortiAnalyzer without configuration changes

Hi,after upgrading our FortiGate HA cluster from 7.4.12 to 7.6.7, we noticed a significant increase in the daily log volume sent to FortiAnalyzer.Environment:FortiGate: 2x FG-200F in HAFortiOS: 7.6.7FortiAnalyzer: VM, currently 8.0.0Logging: FortiAna

593

22 hours ago

VDOM001Explorer

I can't change the HA's Device Priority.

Regarding a FortiGate system configured in an active/standby high-availability (HA) setup,we initially set the Device Priority value for Unit 1 to 200 and the Device Priority value for Unit 2 to 128 (the default).However, even though we hadn’t made a

JasonXXVisitor II

IPv6 Best Security Practices for Beginner

How to Protect Fortigate from IPv6 Security Risks

312

mumbles202New Member

Redundant VPNs between a pair of FGTs

Working on a branch office to HQ redundant vpn setup. Each location has 2 ISPs and I had planned on following this: Manual redundant VPN configuration | FortiGate / FortiOS 8.0.0 | Fortinet Document Library just using 2 tunnels (primary ISP to prima

331

pawelsExplorer

How to download FortiAnalyzer clickhouse schema file

Where I can find click house schema file for FortiAnalyzer ?According to docs.fortinet.com:Each log table stored in an SQL database contains log fields that can be used in datasets.You can view a full list of the fields available for each log type in

111

luisjoNew Member

False Positive SPF Detections in FortiMail 8.0.0

Good day, everyone.I have been experiencing intermittent SPF false positives in **FortiMail 8.0.0**. In some cases, FortiMail reports that the sender's domain does not have an SPF record. However, after verifying the domain manually using both our in

231

FFTNew Member

Fortisiem integration with reporting tool

Can Fortisiem be integrated with PowerBI for reporting? if yes, how? or which reporting tool can be integrated with Fortisiem?

10222

D

ahmadking22Explorer II

Forti OS 7.4.12 – Is it possible to completely disable local Alert/Error/Critical logs?

Hello everyone,I am using a FortiGate 40F running FortiOS 7.4.12.I would like to know if there is any supported or unsupported method to prevent the FortiGate from saving Alert, Error, and Critical logs in the local memory.My goal is to stop these lo

813

Technical Tip: Import specific FortiClient VPN profile without losing other VPN profiles

dbhavsarStaff

FortiClient

Description This article describes how to import a specific FortiClient VPN profile to FortiClient without affecting/losing other profiles. Scope FortiClient Solution As per the below screenshot, currently, there is only one profile configure

kyoneda1Staff

Technical Tip: Introduction of Server Certificate Verification for Virtual Server and ZTNA Access Proxy

Description This article describes the addition of a server certificate verification capability for Virtual Server and ZTNA Access Proxy in FortiOS. Scope FortiOS. Solution Starting in FortiOS v7.4.9 and v7.6.3, FortiGate introduces a new cap

3601

Umer221Staff

Technical Tip: How to determine the web filter category of a website or domain

Description This article describes how to identify the web filter category of a website or domain. This step is crucial for effectively utilizing the web filter feature in FortiGate. Scope FortiOS, FortiGate, Web Filter, FortiGuard. Solution

Jaye17Staff

Troubleshooting Tip: FortiGate HA not showing logs from FortiAnalyzer

DescriptionThis article describes the issue when FortiAnalyzer logs fail to load on FortiGate HA cluster after upgrading FortiAnalyzer to v7.4.11.ScopeFortiGate HA running v7.4.9, v7.4.11, v7.4.12.FortiAnalyzer v7.4.11.SolutionMatching criteria:Forti

omorenomartinStaff

Troubleshooting Tip: FortiManager's FortiProxy ADOM Upgrade Error 'Fail(errno=0):invalid value'

DescriptionThis article describes how to fix an issue where the user encounters the error message Fail(errno=0):invalid value during a FortiManager's FortiProxy ADOM (Administrative Domain) upgrade.Scope FortiManager.SolutionADOM upgrade can fail wit

260

flunaibarraStaff

Technical Tip: OMI Kerberos authentication configuration

DescriptionThis article describes the requirements and configuration needed to integrate the OMI Kerberos authentication successfully.Scope FortiSIEM v7.5.0 and v7.5.1.SolutionPrerequisites:Active Directory Server is configured for Kerberos authentic

Troubleshooting Tip: How to unlock a user account after multiple wrong attempts through FortiClient login on FortiIdentity Cloud

DescriptionThis article describes how to unlock a user account after multiple wrong login attempts during the initial login through the invitation link that is used to log in through FortiClient. ScopeFortiIdentity Cloud (former FortiToken Cloud).Sol

60

pjangStaff & Editor

Technical Tip: How the domain name external feed entries behave when used in DNS Filtering

DescriptionThis article describes some expected behaviors and provides examples of how the FortiGate interprets entries within Domain Name External Feeds when used with DNS Filtering.ScopeFortiGate, DNS filtering, external feeds.SolutionAs a primer,

470

Technical Tip: FortiAP may go offline due to cwWtpd crash when IGMP snooping is enabled on SSIDs under high client density

acuetocasasStaff

FortiAP

DescriptionThis article describes an issue where FortiAP models FortiAP-431G, FortiAP-433G, and FortiAP-233G running firmware v7.6.5 or v8.0.0 may unexpectedly go offline when handling a high number of connected clients.The issue has been observed wh

100

akileshcStaff

Technical Tip: TCP MSS handling changes for IPsec tunnels beginning in FortiOS v7.6.1

DescriptionThis article describes the TCP Maximum Segment Size (TCP MSS) handling changes introduced for IPsec tunnels beginning in FortiOS 7.6.1 and their impact on Path MTU Discovery (PMTUD).Scope FortiOS v7.6.1 through FortiOS v8.0.0.SolutionBegin

660