Troubleshooting Tip: Unable to view Outbreak Alerts in FortiAnalyzer
Description
This article describes troubleshooting steps for situations where Outbreak Alerts are not displayed or cannot be viewed in FortiAnalyzer.
Scope
FortiAnalyzer.
Solution
Navigate to FortiAnalyzer -> Incidents & Alerts -> FortiGuard Services -> Outbreak Alerts.
If the Outbreak Alerts pane is not displaying alerts or cannot be accessed, continue with the troubleshooting steps below:
Verify the Outbreak Detection Service license.
Ensure that the Outbreak Detection Service license is active under Dashboard -> Status -> License Information.
Verify FortiGuard license synchronization.
If the Outbreak Detection Service license is not active, verify that FortiAnalyzer can communicate with FortiGuard and that the license information has been updated. Refer to Technical Tip: License does not reflect in FortiAnalyzer/FortiManager.
For air-gapped environments or if FortiAnalyzer is using FortiManager as a FortiGuard server, refer to Technical Tip: Configure FortiAnalyzer/FortiManager to use FortiManager as a FortiGuard server in an air-gapped network.
Verify the FortiGuard connector status.
Confirm that the FortiGuard connector is active under Incidents & Alerts -> Automation -> Active Connectors.
Verify connectivity to the FortiGuard API/FortiGuard connector.
If the FortiGuard connector is not active, verify DNS resolution and network connectivity to the FortiGuard API server.
Run the following CLI command:
execute ping productapi.fortinet.com
If FortiAnalyzer is deployed behind a proxy, configure the proxy and ensure that outbound HTTPS access to 'productapi.fortinet.com' over TCP port 443 is permitted.
For proxy configuration in FortiAnalyzer, refer to Enabling updates through a web proxy.
Verify HTTPS connectivity.
Ensure that FortiAnalyzer can establish an HTTPS connection to 'productapi.fortinet.com' over TCP port 443. Successful communication with this server is required for the FortiGuard connector to function correctly and for Outbreak Alerts to be generated.
Note: In a fully air-gapped environment with no Internet access and no proxy connectivity to 'productapi.fortinet.com', the Outbreak Alerts feature is not supported, as it depends on communication with the FortiGuard Cloud service.