Troubleshooting Tip: FortiGate HA cluster out of sync in FortiOS v7.6.3 due to an entry under 'config casb user-activity'

On FortiOS v7.6.3, the FortiGate HA cluster can go out of sync due to an entry without a name under 'config casb user-activity', as shown below:

config casb user-activity
    edit ""

        set uuid "a9bdb48d-48ff-494a-8ff2-12bb286e10d7"

        set type built-in

        set casb-name "app"

        set application "vimeo"

    next

end

This issue has been observed after a power loss of the FortiGate HA cluster.

The resynchronization of HA and the recalculation of the checksum do not solve the issue

Since it has no name, it is not possible to delete it. Also, it is not possible to edit it because it has no name, as shown below:

config casb user-activity
(user-activity)# edit ""

empty table name

value parse error before "

Command fail. Return code -56

(user-activity)#

The workaround for solving this issue is to download the backup configuration file, remove the above entry manually, and then load the modified configuration to the FortiGate.

 
The solution for this issue is to upgrade to FortiOS v7.6.5. More information on upgrading the FortiGate can be found on this article: Technical Tip: How to upgrade FortiGate firmware.