Troubleshooting Tip: FortiGSLB Health Check deactivation due to exceeded capacity

Description

This article describes the steps to troubleshoot and understand the deactivation of a Health Check in FortiGSLB due to exceeded capacity.

Scope

FortiAppSecCloud GSLB Service.

Solution

GSLB Health-Checks are used to verify a resource, as explained here: Health-Check.

In case a mail with this text is received:

Dear FortiGSLB customer,
Your FortiGSLB account has the following changes:
Health check (<health-check-name>) of virtual server <name-of-the-service> deactivated due to exceeded capacity
If you are aware of this change, no further action is required.
You are receiving this email because you have subscribed to the                 FortiGSLB Connector and
Virtual Server Status Alerts notification.
If you have any question regarding this email, please refer to your account administrator.
For further questions, please contact the FortiGSLB customer support.

It is necessary to remember that there is a limit for Health-Checks that can be used.

More info about that limit on page 122 of the FortiGSLB Handbook.

To verify the GSLB Health-Checks licenses:

1. Log in to FortiCloud.

2. Select Account Services (on the ASSET MANAGEMENT column on the left).

3. Select the FortiGSLB Serial Number.

4. Check the expiration date for GSLB Cloud Service Health Checks. 

5. Expand selecting the triangle, each Contract number with the words:

6. 'x Units of Contract' and sum supported Health.

7. Check for non-expired contracts.

To verify one by one the Health Checks, including the one deactivated:

1. Log in to the FortiAppSecCloud.

2. Navigate to the GSLB tab.

3. Select Fabric Connector under the Virtual Server Tab.

4. Follow this path: Fabric Connector -> 3 dots -> Manage Virtual Server -> 3 dots -> Edit.

5. The list of the Health-Checks configured for that Virtual Server will be visible with the relationship between them.

In case a new license for GSLB Health-Checks is necessary, the Fortinet Sales Team, following the company need to be involved.

In case logging in FortiCloud using an IAM user, the Account Service page or the FortiAppSecCloud page (under Services -> Cloud Services) are not visible, it depends on the IAM Profile associated with that user, as explained here: Managing permission profiles.

Only the Master User or an IAM User associated to IAM Permission Profile with the Read & Write permission for the IAM portal can edit it.

More info here: User management models.