Technical Tip: FortiAnalyzer NOT ACCESS GUI Error PR_END_OF_FILE_ERROR

When attempting to access the FortiAnalyzer device via HTTPS, the GUI fails to load and the browser displays the following error: PR_END_OF_FILE_ERROR.

Behavior:

The https service on FortiAnalyzer is enabled:

config system interface
    edit port4
        set ip 10.5.100.80 255.255.0.0
        set allowaccess ping https ssh snmp http fgfm
end

Admin access is also enabled:

get system admin setting

https_port : 443
admin_server_cert : FAZ-2025

Solution:

To verify the current HTTP port configuration, check the http_port setting within the config system settings context.

(setting)# get
access-banner : disable
admin-https-redirect: enable
admin-login-max : 256
admin-scp : enable
admin_server_cert : FAZ-2025
auth-addr : ()
auth-port : 443
banner-message : ()
fgt-gui-proxy : enable
fgt-gui-proxy-port : 8082
firmware-upgrade-check: enable
fsw-ignore-platform-check: disable
gui-theme : neutrino
http_port : 8080
https_port : 443
idle_timeout : 900
idle_timeout_api : 900
idle_timeout_gui : 900
idle_timeout_sso : 900
objects-force-deletion: enable
preferred-fgfm-intf : ()
show-add-multiple : disable
show-checkbox-in-table: disable
show-device-import-export: disable
show-fct-manager : disable
show-hostname : disable
show-log-forwarding : enable
unreg_dev_opt : add_allow_service
webadmin_language : english

If the http_port is set to a value other than 80, use the following command to reset it:

(setting)# unset http_port

To verify that this parameter has been configured with a default port, run the command again:

(setting)# get
access-banner : disable
admin-https-redirect: enable
admin-login-max : 256
admin-scp : enable
admin_server_cert : FAZ-2025
auth-addr : ()
auth-port : 443
banner-message : ()
fgt-gui-proxy : enable
fgt-gui-proxy-port : 8082
firmware-upgrade-check: enable
fsw-ignore-platform-check: disable
gui-theme : neutrino
http_port : 80
https_port : 443
idle_timeout : 900
idle_timeout_api : 900
idle_timeout_gui : 900
idle_timeout_sso : 900
objects-force-deletion: enable
preferred-fgfm-intf : ()
show-add-multiple : disable
show-checkbox-in-table: disable
show-device-import-export: disable
show-fct-manager : disable
show-hostname : disable
show-log-forwarding : enable
unreg_dev_opt : add_allow_service
webadmin_language : english

(setting)# end

Now, try to access the FortiAnalyzer via the GUI. The HTTPS service must be running.

Explanation:

The Web Service (SOAP/XML API) uses TCP port 8080. If this port is already used by another service or application, it may cause a conflict when accessing the GUI.

Related article:

FortiAnalyzer Ports