Skip to main content
Nur
Staff
Nur
Staff
October 21, 2024

Troubleshooting Tip : How to fix the Connection Refused after upgrade FortiAnalyzer

  • October 21, 2024
  • 0 replies
  • 3561 views
Description

This article describes that after FortiAnalyzer had been upgraded to v7.2.X and v7.4.X, the status FortiAnalyzer from FortiGate showed 'connection refused'.

 

Screenshot 2024-10-20 085855.png
Scope FortiAnalyzer and FortiGate.
Solution
  1. Run 'execute log fortianalyzer test-connectivity' from FortiGate to check the error message.

 

execute log fortianalyzer test-connectivity

Failed to get FAZ'z status. No responce from server. (-20)

 

  1. Sniffer the packet from FortiAnalyzer and the FortiAnalyzer resets the connection.

 

Screenshot 2024-10-20 090317.png

 

  1. Telnet from FortiGate will show Failed:

 

Ertiga-kvm09 # exe telnet 10.47.X.X 514
Trying 10.47.X.X...
Refused to connected to 10.47.X.X

 

  1. Check from FortiAnalyzer if it is possible to recognize the FortiGate IP using the 'diag fmnetwork arp list' and 'diag fmnetwork netstat list'.
  2. After confirming there is no issue on the network layer, check the dashboard from FortiAnalyzer -> Alert Message Console, if any notification shows failed after the upgrade. Most probably the Alert will show 'Postgres upgrade fail. Please rebuild-db '.

 

Screenshot 2024-10-20 092438.png

 

  1. If the error is visible, it means the FortiAnalyzer failed to rebuild the Database automatically after the upgrade. It is a common process to upgrade FortiAnalyzer from the old version v6.2.X or v6.4.X the Progress will rebuild the database. However, if it fails to rebuild, rebuild the Database manually.
  2. The command is 'execute sql-local rebuild-db'. After running the command, check the FortiAnalyzer status from FortiGate. It will show 'Connected'.
    Terms & ConditionsAccessibility statement