Support Forum
- - Knowledge Base
Community Groups
Blogs

Create topic
Login

Celebrating our Community: Thank You for an Incredible Month

20 days ago

Welcome to the Fortinet Community!

73,503 Discussions
82,732 Replies
206,807 Members

Community Guidelines

Consult our Support Forum

Explore the Fortinet Knowledge Base

Ask questions and help others

Top Community Conversations

Recent activity
Unanswered
Recent KB Articles

Sinichi_KudoVisitor III

Support Forum

Network Setup for FortiGate, Ruijie Switch, and Access Points in the Same Subnet

Please help meI want to set it up like this: I have FortiGate, a Ruijie managed switch, and several APs. FortiGate port 3 will connect to the switch, and the APs will connect to the switch as well. I want mobile devices connected to the APs to be on

02

just now

DerekWSmallExplorer

Support Forum

Rule to allow HTTP/HTTPS traffic to a specific domain is allowing all HTTP/HTTPS traffic.

I’m trying to create a rule to allow traffic to a specific public domain or list of domains, from my internal users. Traffic that doesn’t match the “whitelisted” destination domain(s) should flow down through the existing rules. The following seems

131

4 minutes ago

renanrdriguesExplorer

Support Forum

FortiManager "unset cert-probe-failure"

We have FortiManager 7.6.7 and two FortiGates running FortiOS 7.4.11.Under Security Profiles > SSL/SSH Inspection, we have an object named “SSL-EXCEPT” with set cert-probe-failure allow, and this profile is used in several firewall policies.In For

FRNZZZZNew Member

WAN1 STOPPED WORKING- I have two FortiGate 60F setups as stack (HA1 and HA2)- I have Juniper router - I have a Rogers modem with 2 public IP 187.x.x.x/30 and 184.x.x.x/30- link 1: Rogers modem port1 > FG60F WAN1- link 2: Rogers modem port2 > Ju

133

37 minutes ago

positiveBeamNew Member

FortiSIEM

Frequent admin privilege escalations on supervisor

We just installed a new FSM virtual appliance cluster on 7.4.2. In the raw events we are seeing a high frequency stream of Generic_Unix_Successful_Switch_User events coming from the Supervisor node.Raw privilege escalation eventsThey don’t seem to co

00

51 minutes ago

jcrowerExplorer II

Support Forum

Fortigate 81F - dual wan; one internet, one ipsec

Hi all,I can see lots of posts about dual wan connections on the Fortigate with lots of solutions for different scenarios, however I'd still like some advice with my situation.We have a Fortigate 81F (firmware 7.4.12) at the main office. It currentl

NinioloonNew Member

Hi,I have FAZ FAZVM64-HV with v7.6.3 build3492 (Feature)when I login I see that nevest version is available to download - 7.6.7 (3737) I can’t upgrade this VM to nevest version.I am using FGT_VM64_HV-v7.6.7.M-build3704-FORTINET.out

beniNew Member

The MyCanal website used to work on my site, but now it doesn't. When I check on my Forti account, I see that it's blocked. So I want to understand why Forti is blocking MyCanal now and what I should do.

KerryWNew Member

VPN Manager 7.6.7 "cannot find addr" "load vpn node failed"

Hi i have create lots of VPN definitions in the VPN Manager and assign them to Managed fortigates. When i try and install the policy i quickly get this error. "cannot find addr xxxx" "load vpn node x failed". the object is there but need to be lo

Mohamed_hNew Member

how can i identify Printers using its mac addresses specifically without using MAB

now i want to identify the printers with its specific mac addresses in Fortinac and if there is another mac address unless i identify put it in quarantine vlan.how can i achieve that?

50

5 hours ago

Sinichi_KudoVisitor III

Support Forum

Network Setup for FortiGate, Ruijie Switch, and Access Points in the Same Subnet

Please help meI want to set it up like this: I have FortiGate, a Ruijie managed switch, and several APs. FortiGate port 3 will connect to the switch, and the APs will connect to the switch as well. I want mobile devices connected to the APs to be on

02

just now

DerekWSmallExplorer

Support Forum

Rule to allow HTTP/HTTPS traffic to a specific domain is allowing all HTTP/HTTPS traffic.

I’m trying to create a rule to allow traffic to a specific public domain or list of domains, from my internal users. Traffic that doesn’t match the “whitelisted” destination domain(s) should flow down through the existing rules. The following seems

131

4 minutes ago

renanrdriguesExplorer

Support Forum

FortiManager "unset cert-probe-failure"

We have FortiManager 7.6.7 and two FortiGates running FortiOS 7.4.11.Under Security Profiles > SSL/SSH Inspection, we have an object named “SSL-EXCEPT” with set cert-probe-failure allow, and this profile is used in several firewall policies.In For

FRNZZZZNew Member

WAN1 STOPPED WORKING- I have two FortiGate 60F setups as stack (HA1 and HA2)- I have Juniper router - I have a Rogers modem with 2 public IP 187.x.x.x/30 and 184.x.x.x/30- link 1: Rogers modem port1 > FG60F WAN1- link 2: Rogers modem port2 > Ju

133

37 minutes ago

positiveBeamNew Member

FortiSIEM

Frequent admin privilege escalations on supervisor

We just installed a new FSM virtual appliance cluster on 7.4.2. In the raw events we are seeing a high frequency stream of Generic_Unix_Successful_Switch_User events coming from the Supervisor node.Raw privilege escalation eventsThey don’t seem to co

NinioloonNew Member

Hi,I have FAZ FAZVM64-HV with v7.6.3 build3492 (Feature)when I login I see that nevest version is available to download - 7.6.7 (3737) I can’t upgrade this VM to nevest version.I am using FGT_VM64_HV-v7.6.7.M-build3704-FORTINET.out

beniNew Member

The MyCanal website used to work on my site, but now it doesn't. When I check on my Forti account, I see that it's blocked. So I want to understand why Forti is blocking MyCanal now and what I should do.

KerryWNew Member

VPN Manager 7.6.7 "cannot find addr" "load vpn node failed"

Hi i have create lots of VPN definitions in the VPN Manager and assign them to Managed fortigates. When i try and install the policy i quickly get this error. "cannot find addr xxxx" "load vpn node x failed". the object is there but need to be lo

Mohamed_hNew Member

how can i identify Printers using its mac addresses specifically without using MAB

now i want to identify the printers with its specific mac addresses in Fortinac and if there is another mac address unless i identify put it in quarantine vlan.how can i achieve that?

50

5 hours ago

Mohamed_hNew Member

Support Forum

LoginDialogDisabled reg key setting is configred for persistent agent but the windows popup credentials still appears

Now i make authentication in fortinac using persistent agent and passive agent and i configure LoginDialogDisabled to hide the popup login credentials but it still appears for first time user appears although i configure everything as per below artic

40

5 hours ago

vraevStaff

FortiManager

Technical Tip: Troubleshooting steps if the Remote Access feature to the FortiGate is not working

Description   This article describes basic troubleshooting steps to undertake when 'Remote Access' is not working from the FortiManager.   Scope   FortiManager v7.4.2 and above.   Solution   Connections diagram:   &nbsp

sfratiStaff

Technical Tip: In Azure, FortiGate HA timers must be tuned and be less aggressive than on physical devices

DescriptionThis article describes how to start to tune the HA heartbeat settings in an active-passive cluster of FortiGate on the Azure cloud. The idea is to recommend customizing default heartbeat settings on a VM on Azure to avoid HA error 'msg:' m

160

15 hours ago

alaxkarStaff

FortiSIEM

Technical Tip: FortiSIEM ClickHouse disk usage growth analysis

DescriptionThis article describes how to identify the primary contributors to ClickHouse disk utilization and validate whether the growth is expected based on event volume and retention settings.ScopeFortiSIEM.SolutionIn FortiSIEM environments utiliz

110

21 hours ago

alaxkarStaff

FortiSIEM

Technical Tip: FortiSIEM SNMP monitoring stops after OS-level service changes

DescriptionThis article describes SNMP-based monitoring may stop functioning after a system reboot or maintenance activity even though the SNMP credentials configured in FortiSIEM are correct. This can occur when the operating system SNMP services di

150

22 hours ago

iandersonStaff

FortiGate

Troubleshooting Tip: Resolve 'could not connect to the FortiManager to retrieve its serial number' on FortiGate-VM

Description This article describes a change in behavior on FortiGate-VM registering to FortiManager. Scope FortiGate VM 7.6.x & FortiManager 7.4.7+. Solution When trying to set a FortiManager in Central Management on a FortiGate-VM, the f

ndumajStaff

Troubleshooting Tip: EntraID service connector truncates group list if member of more than 100 groups

DescriptionThis article describes an issue encountered when using Entra ID group membership to provide differentiated access to end users authenticating with domain credentials.The problem occurs when group memberships for certain users are not corre

664

1 day ago

kiriStaff & Editor

FortiGate

Technical Tip: How to enable EAP-TTLS for IPSec IKEv2 tunnels in VPN-only (unlicensed) FortiClient

Description This article describes how to enable EAP-TTLS as an authentication method in VPN-only (unlicensed) FortiClients. Scope FortiClient, EAP-TTLS authentication for IPsec VPN. Solution EAP-TTLS Support in FortiClient. FortiCli

HatibiStaff & Editor

Technical Tip: Outbound firewall authentication using AWS IAM Identity Center as a SAML IdP

DescriptionThis article describes how to configure and validate the FortiGate integration with AWS IAM Identity Center using SAML. ScopeFortiGate. SolutionIn this scenario, user access to the internet is allowed only after successful SAML authentica

670

3 days ago

xshkurtiStaff

FortiClient

Technical Tip: How to install latest FortiClient software on the Ubuntu 24.04

Description This article describes how to install FortiClient in Ubuntu Noble 24.04. Scope FortiClient v.7.4.0,  FortiClient v.7.4.6. Solution FortiClient is an all-in-one comprehensive endpoint security solution that extends t

farhanahmedStaff

Technical Tip: How to check and kill top CPU and Disk IO process using FortiManager/FortiAnalyzer API

DescriptionThis article describes using API how to check FortiAnalyzer/FortiManager process taking top CPU, memory and disk IO.ScopeFortiAnalyzer, FortiManager.SolutionRun the following API POST request to get Top CPU and Memory intensive processes:{

230

4 days ago

Top Helpful Authors

Currently there are no user.

VIEW ALL

Badge Updates

Sinichi_Kudohas earned the badge Helpful (10 replies)
positiveBeamhas earned the badge Discussion Starter
KerryWhas earned the badge First Reply

VIEW ALL

Events

Start Conversation

Find and follow interesting people, join groups for discussion and share files

Featured Articles

Technical Tip: Adding an additional SWAP disk

Description This article describes how to add an additional SWAP disk. Scope FortiSIEM. Solution Add a new HDD of 20 to 30 GB from the Hyper...

Forum|Forum|2 months ago

1120

Technical Tip: FortiManager config push fails with commit failed error after upgrading it to v7.6.5 GA

Description This article describes how to resolve the installation task failure issue due to a post-commit check failure: wireless-controller vap - ss...

Forum|Forum|2 months ago

5400

Technical Tip: Troubleshooting FortiGate not getting connected to FortiAnalyzer Cloud

Description This article describes the steps to troubleshoot a FortiGate device that is not getting connected and logging to FortiAnalyzer Cloud. The...

Forum|Forum|2 months ago

3720

Technical Tip: Clear old system logs in FortiSIEM

Description This article describes how to clear old logs. Scope FortiSIEM. Solution The following steps describe how to review the current space used...

Forum|Forum|2 months ago

2050

Fortigate Install on ProxMox

Good day,Trying to install fortigate on ProxMox but unable to do so. I followed the install guide but when the VM is started it gets stuck on formatti...

Forum|Forum|8 months ago

16533

Troubleshooting Tip: How to force a 4G LTE only or a 5G only connection via AT!SELRAT command on the FortiExtender-511G

Description This article describes the steps to force a 4G LTE-only or a 5G only connection via AT!SELRAT command on the FortiExtender-511G. Scope F...

Forum|Forum|2 months ago

1380

Troubleshooting Tip: How to solve booting loop on FortiSwitch-6xxF series when using soft reboot

Description This article describes how to solve the booting loop on FortiSwitch-6xxF series when using soft reboot. Scope FortiSwitch 6xxF-FPOE Seri...