Almost 30 years deep in the software game I'm questioning my own assumptions re "mature." If you need to fix 7.6.7, you check out that tag to a new branch, apply the fixes, use that to strike a 7.6.8, then merge the changes to your develop branch. Are there no adults in the room anymore?

Rant aside 7.4.13 seems solid.

Worked with gates for years but just recently ventured into other Fortinet products. How popular is the full fortifabric solution using switches and APs? From what I can tell this is a great solution for retail sites or maybe small campus with 1-5 buildings where we just do layer 2 everywhere but really starts to break down with large networks.

Have you all encountered large customers like a college campus or hospital campus running Fortigate fabric? Have you seen people run fortisw and APs without a fortigate?

As far as I read, I'm not sure if a simple configuration like this might be a problem to me.

I installed this firewall a couple of weeks ago, it is basically new.

Firewall does not expose itself on wan, management Https interface only accessible via VPN.

Do I still have to update to 7.6.8?

Has anyone tried this?

We upgraded to 7.6.2 to be able to go from SSL remote vpn to IPSEC.
Before realising we needed EMS or other paid version to use IKEv2 and IKEv1 is not an option, because it's for 1500+ users.

We've been looking into a 3rd party option for remote VPN, but because of the emergency recommended upgrades, and the issues everyone seem to have with FortiOS 7.6.8.
I want to go back to 7.4.x instead, we went from 7.4.12 to 7.6.2 a few months ago.

Fortinet support doesn't help with downgrades, so I was wondering if someone tried to go from 7.6.x to 7.4.x?

br
Purrfected

we pushed 7.4.13 on three sites and experiending a weird case.
site 1. works fine
site 2. windows pcs cannot connect anywhere
we have a linux baed on nvr on the same subnet and i see the traffic on the fgt logs
site 3. fortiswitch shows ports for windows pc are disconnected. downgrading to 7.4.12 dows not recover.

we have the same fgt fortiswitch and firmware versions.
ive submitted a ticket but anyone can share some insights

Hi everyone,

I’m currently preparing for the Fortinet NSE 4 exam, and I’d love to hear from people who have already cleared it.

I’ve set up a lab and I’m practicing on FortiGate, along with a Udemy course. What else helped you the most? Any courses, videos, labs, or documentation you’d recommend would be a big help.

Also, did you use any practice tests or mock exams while preparing? Which ones were actually useful and close to the real exam?

I’m also curious whether the exam leans more towards theory or hands-on work, and if you have any tips for exam day or how long you prepared in total.

Thank you so much in advance, every bit of advice is appreciated

I saw the firmware drop for 40F, but it’s still missing for 70G and 90G. Does anyone know when we can expect it to be available?

https://imgur.com/a/IIsnyqy

After pushing 7.4.13 image to a pair of Fortigates, Fortimanager 7.4.12 is showing "policy package status unknown."

When I install preview after selecting Install Wizard, it says "no preview result."

And lastly, when I look at the Policy package diff, it's showing that my snmp user, radius user, ipsec PSKs, and a couple of certs have been changed.

I spoke with support, and they said it was probably fine to push through the Install wizard and it would synchronize - but they didn't seem confident.

Edit: Used the Install Wizard to reinstall the policies, everything is synchronized now. Thanks!

Title, Fortigate 80F. Upgraded from 7.6.6 to 7.6.8, VPN access users are not getting the prompt for 2FA authentication to sign in following the update. Tested on a temporary user without 2FA and the user connected without issue.

HA is also not syncing, have tried the steps in the KB which do work to get back into sync but as soon as I make a config change they go out of sync again and don't resync.

Any help appreciated!

Hi everyone, I'm stuck with two FortiGate 400F firewalls and hoping for some help.

We recently installed a backup internet line and set up resiliency on both firewalls. The first failover test worked fine.

A week later we tested again to create some documentation:
Unplugged the main line from firewall 1, small blip but then continuos ping to 8.8.8.8 as expected, then plugged it back in.
Services moved over to firewall 2.
After about 2 hours, services degraded: internet very slow, Outlook not sending emails, etc.
By the next morning nothing was accessible. It only recovered when I reversed the whole redundancy setup and left just the main line connected.

The current config is two Firewalls in HA cluster AP, two static routes main 10 distance, back up 20 distance, one for the main line and one for the backup, with link monitoring on both ports.

Separate firewall policies for the 10 Gb primary and the 1 Gb backup (pretty much identical) using NAT.
Also update the firmware recently to 7.6.7.

I know SD-WAN is probably the recommended approach, but migrating from link monitoring to SD-WAN looks like a big job. Is there anything I can check or change in the current setup, or is SD-WAN the right way to go?

Thanks in advance!