Welcome to the Fortinet Community!

FGT-50E with FAP 221E on 6.0.x, to be migrated to a FGT-50G

Hello dear community, I got a new customer that has an unlicensed FortiGate 50E and FortiAPs 221E on firmware 6.0.x. They want to replace the FortiGate with the 50G model but want to keep the APs for now. The target FortiOS for 50G would be 7.4.12. A

91

13 minutes ago

ShahAlizadaNew Member

Can FortiGate 201G Fully support 7.6.x

Hello Community, We have a Fortigate 201G with firmware version of v7.2.x we have done some risk assessments on the fortigate and most of the risks identified shows all versions 7.2.x are affected by specified vulnerability, and need move to another

23

1 hour ago

MagdalenaVisitor III

FortiEMS how to choose between multiple licenses

Hallo,i am using FortiEMS with 2 different Client licenses active, one for EPP and one for ZTA.I only have 25 EPP licenses that i want to give to specific clients.Is there a way to specifically use those licenses on those clients or will the EMS rand

dbhavsarStaff

Troubleshooting Tip: Error 'app_not_configured_for_user' when using Google SAML as IdP for SSL VPN

Description This article describes resolving the error 'app_not_configured_for_user' when using Google SAML IdP for SSL VPN. Scope FortiGate. Solution The following error is encountered:Verify the IdP and SAML settings are identical on FortiG

guptasStaff

Technical Tip: How to configure an additional port for the URL when the application is already on-boarded with HTTPS port 443 or another port

DescriptionThis article describes how to configure FortiAppSec application settings when the application URL has a different port to answer and the main page is on-boarded with HTTPS port 443 or any other port.ScopeFortiAppSec Cloud.SolutionAn admini

10

ekarimStaff

Troubleshooting Tip: How to resolve IPsec VPN issue 'failed to compute DH shared secret' with StrongSwan

DescriptionThis article describes an issue where the IPsec connection fails to re-establish because StrongSwan sends incorrect data in the Key Exchange payload, causing DH shared secret generation to fail.ScopeFortiGate, StrongSwan.SolutionAn intermi

240

Discover option in windows template.

OsamaFattohExplorer II

FortiSIEM

Hello, I have a question.What does the "Discover" option in the Windows and Linux Agent Template monitor settings do?

Rick2026New Member

How to retrieve current "Log Insert Lag Time" value

Sporadically our Fortianalyzer (7.4.9) will stop sending logs to our main syslog log collector (Is still collecting from other systems). The “Log Insert Lag Time” will get up to 18 or so hours and keep climbing, when it should be like 20-30 seconds.

gmonteStaff

Technical Tip: Outgoing traffic not showing for EMAC VLAN

Description This article describes outgoing traffic behavior that may be encountered on FortiOS versions up to v7.4.11, v7.6.6, and v8.0.0 when using the EMAC VLAN interface. In particular, no transmitted packets (outgoing traffic) are registered as

160

ShivamSainiNew Member

FortiAuthenticator On-Premises integration

Hi Team,We are planning to deploy FortiAuthenticator On-Premises for a client.Client Requirement: When users register their endpoint with FortiClient EMS (ZTNA), MFA should be enforced. The client wants users to have either SMS OTP or Google Authen

275

Solutions79New Member

FGT-50E with FAP 221E on 6.0.x, to be migrated to a FGT-50G

Hello dear community, I got a new customer that has an unlicensed FortiGate 50E and FortiAPs 221E on firmware 6.0.x. They want to replace the FortiGate with the 50G model but want to keep the APs for now. The target FortiOS for 50G would be 7.4.12. A

91

13 minutes ago

ShahAlizadaNew Member

Can FortiGate 201G Fully support 7.6.x

Hello Community, We have a Fortigate 201G with firmware version of v7.2.x we have done some risk assessments on the fortigate and most of the risks identified shows all versions 7.2.x are affected by specified vulnerability, and need move to another

23

1 hour ago

MagdalenaVisitor III

FortiEMS how to choose between multiple licenses

Hallo,i am using FortiEMS with 2 different Client licenses active, one for EPP and one for ZTA.I only have 25 EPP licenses that i want to give to specific clients.Is there a way to specifically use those licenses on those clients or will the EMS rand

23723

Z

21 hours ago

OsamaFattohExplorer II

FortiSIEM

Discover option in windows template.

Hello, I have a question.What does the "Discover" option in the Windows and Linux Agent Template monitor settings do?

70

ShivamSainiNew Member

FortiAuthenticator On-Premises integration

Hi Team,We are planning to deploy FortiAuthenticator On-Premises for a client.Client Requirement: When users register their endpoint with FortiClient EMS (ZTNA), MFA should be enforced. The client wants users to have either SMS OTP or Google Authen

TutekNew Member

Hi,I now create additional dialup tunnels on second wan for failover, but we use ftm to get notifications during login on mobile smartphones, the config looks like:FGT (ftm-push) # show full-configuration config system ftm-push set proxy enable

443

renanrdriguesExplorer II

FortiManager "unset cert-probe-failure"

We have FortiManager 7.6.7 and two FortiGates running FortiOS 7.4.11.Under Security Profiles > SSL/SSH Inspection, we have an object named “SSL-EXCEPT” with set cert-probe-failure allow, and this profile is used in several firewall policies.In For

582

alfredinoExplorer

FortiOS 7.6: category and URL based web filtering

Hello,I am using FortiOS 7.6.x. According to the documentation, I can block traffic based on both category and URL.Specifically, my URL filters use the *FQDN wildcard block. It works well with a few exceptions such as: *worldguesser.io or *crossyroad

754

ShivamSainiNew Member

FortiZTNA user based mac binding

Hello , can we do user based ztna web proxy with using local user of Fortigate local database with mac binding , mean ztna web proxy is opened with only same user with same mAc of machine , otherwise rejected

Roberto_CNew Member

Difficulty in not receiving logs from MongoDB (SaaS) in FortiSIEM

ContextI am working on the integration of a MongoDB SaaS environment (hosted by a cloud provider) with FortiSIEM for log centralization and correlation.During the analysis, it was identified that the SaaS platform does not provide direct sending of l

dbhavsarStaff

Troubleshooting Tip: Error 'app_not_configured_for_user' when using Google SAML as IdP for SSL VPN

Description This article describes resolving the error 'app_not_configured_for_user' when using Google SAML IdP for SSL VPN. Scope FortiGate. Solution The following error is encountered:Verify the IdP and SAML settings are identical on FortiG

guptasStaff

Technical Tip: How to configure an additional port for the URL when the application is already on-boarded with HTTPS port 443 or another port

DescriptionThis article describes how to configure FortiAppSec application settings when the application URL has a different port to answer and the main page is on-boarded with HTTPS port 443 or any other port.ScopeFortiAppSec Cloud.SolutionAn admini

10

ekarimStaff

Troubleshooting Tip: How to resolve IPsec VPN issue 'failed to compute DH shared secret' with StrongSwan

DescriptionThis article describes an issue where the IPsec connection fails to re-establish because StrongSwan sends incorrect data in the Key Exchange payload, causing DH shared secret generation to fail.ScopeFortiGate, StrongSwan.SolutionAn intermi

240

gmonteStaff

Technical Tip: Outgoing traffic not showing for EMAC VLAN

Description This article describes outgoing traffic behavior that may be encountered on FortiOS versions up to v7.4.11, v7.6.6, and v8.0.0 when using the EMAC VLAN interface. In particular, no transmitted packets (outgoing traffic) are registered as

160

duenlimStaff

Troubleshooting Tip: The Firewall Policy GUI page gets stuck in loading state on FortiOS v7.6.7

DescriptionThis article describes a known issue where the Firewall policies Interface Pair View gets stuck when scrolling to the bottom of the browser.ScopeFortiGate v7.6.7.SolutionIn the GUI, go to Firewall Policies and scroll from the top to the bo

1030

kchengStaff & Editor

Technical Tip: FortiGuard (96.45.45.45, 96.45.46.46) DNS over TLS not working on FortiOS v7.4.10/v7.4.11/v7.4.12

DescriptionThis article describes the issue and the workaround for DNS over TLS, showing as unreachable since 10:30 AM PDT on May 27 2026.Scope FortiOS v7.4.10/v7.4.11/v7.4.12.SolutionThe mentioned FortiOS version could be impacted with the following

aelkadiStaff

Troubleshooting Tip: How to resolve HTTP/2 'Header List Size in SETTINGS Frame Exceeded' error on FortiWeb

DescriptionThis article describes how to resolve the HTTP/2 'Header List Size Exceeded' error on FortiWeb. This issue may occur when the request header size exceeds the allowed limit, resulting in the connection being blocked.ScopeFortiWeb.SolutionFr

170

Troubleshooting Tip: Useful workaround when FortiManager does not install configuration as expected

rmagdalchukStaff

FortiManager

DescriptionThis article describes useful workarounds in circumstances where, due to known issues, FortiManager does not install the configuration as expected.ScopeFortiManager/FortiManager Cloud.SolutionBefore trying the workaround, confirm that Fort

420

kiriStaff & Editor

Technical Tip: How to enable EAP-TTLS for IPSec IKEv2 tunnels in VPN-only (unlicensed) FortiClient

Description This article describes how to enable EAP-TTLS as an authentication method in VPN-only (unlicensed) FortiClients. Scope FortiClient, EAP-TTLS authentication for IPsec VPN. Solution EAP-TTLS Support in FortiClient. FortiCli

312003

Troubleshooting Tip: SPF action not applied in FortiMail

icianciStaff

FortiMail

DescriptionThis article describes how to troubleshoot why the SPF check fails, but corresponding actions are not applied in FortiMail.ScopeFortiMail.SolutionSpam email has been received from a spoofed IP address that is not in the SPF list for the re

341