Troubleshooting Tip: Cannot run FortiGate’s CLI command ‘diagnose ips cfgscript run’

Description

This article describes how to handle a situation where the CLI command 'diagnose ips cfgscript run' cannot be run in a FortiGate unit.

Scope

FortiGate v7.0.17 ,v7.4.7 ,v7.6.2.

Solution

1. On the FortiGate unit, go to the CLI and run the following CLI command:
   
   

diagnose ips cfgscript run

The following error message will appear: 

FGT # diagnose ips cfgscript run

command parse error before 'cfgscript'
Command fail. Return code -61

2. This happens after upgrading FortiGate firmware version to v7.0.17 ,v7.4.7 ,v7.6.2 and above.
   This is because the cfgscript command has been removed in these versions.
   
   

The command can be used to run Lua code for numerous purposes. For security reasons, the command has been removed. Refer to PSIRT ID FG-IR-26-143.