Technical Tip: How to perform collector connectivity test using 'Connect to Device'

Description

This article describes how to test collectors' connectivity to the system components – Core and Aggregator. This can be performed using the management console 'Connect to Device' option.

Scope

Testing the connectivity of collectors to key system components (Core and Aggregator) can be critical for troubleshooting and ensuring proper system functionality. This process can be performed directly from the Management Console using the 'Connect to Device' option.

Solution

To perform a connectivity test using 'Connect to Device', perform the following steps:

1. Navigate to Connect to Device:

• Go to Management Console → Inventory → Collectors.
• Select the desired collector and select 'Connect to Device'.

Note:

Some devices do not have PowerShell installed. Connecting attempts will result in an error message.

2. Open the Command Line in the Terminal Window:

• Once the terminal window opens, type %cmd (case-sensitive) and press <Enter>.
• This opens a command line interface within the terminal.

3. Run basic connectivity test - using ping command (for example >>> ping 8.8.8.8).
4. If the device has PowerShell installed, run the following commands for detailed connectivity tests:

• Test Aggregator connectivity:

>>  powershell Command "Test-NetConnection <Aggregator FQDN or IP Address>  -Port 8081 -informationLevel Detailed"

• Test Core connectivity:

>>  powershell Command "Test-NetConnection <Core FQDN or IP Address> -Port 555 -informationLevel Detailed"

Using 'Connect to Device' the user can run further commands such as:

• Service Stop:

# "C:\Program Files\Fortinet\FortiEDR\FortiEDRCollectorService.exe" --stop

The 'Stop' command will prompt for the registration password, available in the Management Console->Administration->Tools)

• Service Start:

"C:\Program Files\Fortinet\FortiEDR\FortiEDRCollectorService.exe" --start

• Service Status:

"C:\Program Files\Fortinet\FortiEDR\FortiEDRCollectorService.exe" --status

• Create collector logs:

"C:\Program Files\Fortinet\FortiEDR\FortiEDRCollectorService.exe" –support

Important Notes:

• For Windows devices, the terminal supports predefined commands, standard Windows command line commands, and Python commands.
• When entering a file path, ensure the full path is specified (e.g., C:\MyDirectory or C:\MyDirectory\MyFile.bat).
• Predefined commands can be viewed in the terminal’s Help menu.

Related documents:

FortiEDR Connect

Introducing FortiEDR