Fortinet has officially transitioned FortiOS 7.6 into the “Mature” phase with the release of FortiOS 7.6.5. For many administrators, this is the green light to begin upgrading production environments. However, this release isn’t just about bug fixes, it introduces several mandatory enforcement measures designed to harden security. If you are…
After upgrading the Fortigate to 7.2.12, 7.4.9 or 7.6.4 the SAML authentication (for e.g. IPsec or SSL VPN) is not working anymore. The authentication process takes a very long time and then results in a timeout. Reason for this is that Fortinet has started to verify the signature for SAML…
Fortinet published information about a new vulnerability in FortiWeb. Affected devices must have specific firmware patches and management interfaces accessible via the WAN. Patched already exist to fix the issue.
We encountered an interesting — and quite disruptive — behavior in a High Availability (HA) setup. Situation Overview When restoring a configuration on one cluster node, the entire configuration of the other nodes was overwritten — including settings that are supposed to remain unique and unsynced, such as hostnames, management…
Update 27.07.2026: Testing with an FG-90G running FortiOS 7.6.7 confirms that Port A and Port B can once again be selected as FortiLink interfaces. To enable this, Interfaces A and B must first be removed from all firewall policies, their role changed from WAN to Undefined, and their IP configuration…
Starting October 15, Fortinet is introducing a significant update to its certification program — reintroducing the well-known NSE level names, while retiring some exams and launching new ones. In this blog post, you’ll find everything you need to know about the updated NSE path, requirements for FCP and FCSS certifications,…
Last Update: 31.12.2025 Spoiler alert: Current FortiOS versions do not allow BGP blackhole routing out of the box. But we have two possible workarounds ready for you.
Last Updated: 20. June 2025 Fortinet has released FortiOS 7.6.3 on April 17th. There are a lot of resovled issues but again another feature was completely removed. After the SSLVPN (tunnel- and web-mode) has been completely removed on models with only 2GB RAM and the small G models, now SSLVPN…
Mit der neusten FortiClient Version 7.4.3 hat Fortinet erstmals eine ARM-kompatible Version veröffentlicht und unterstützt damit auch neue Laptops und Tablets (als Beispiel Microsoft Surface Modelle). Im Support Portal kann dieser Client ab sofort heruntergeladen werden. Nebst dem EMS gemanagten Client gibt es auch den VPN only Client als Standalone…
Einleitung One-Arm-Installation bedürfen einem speziellen Augenmerk, insbesondere wenn es um den Redirect vom Traffic geht – also Traffic, der über das gleiche logische Interface rausgeschickt wird, wo er auch reingekommen ist. Auf der Fortigate wird der Redirect Traffic per default erlaubt, so dass der Traffic ohne weitere Prüfung durch die…
