Since the fortigate upgrade from 7.0.12 to 7.2.6 we noticed a problem with fortiosapi. When creating an address we now get a 403 error. we use https port 10443 the name of the Cookie is not 'ccsrftoken' but 'ccsrftoken_10443' the result of this is that the session header does not have an X-CSRFTOKEN. As a workaround, I adjusted the update_cookie routine: if cookie.name == 'ccsrftoken': changed to if cookie.name == 'ccsrftoken' or cookie.name == 'ccsrftoken_10443': now it works for me....