Skip to main content
mpapisetty
Staff
mpapisetty
Staff
January 9, 2026

Technical Tip: FortiGate-FortiManager (FGFM) tunnel reset during Policy Package installation

Description This article describes the expected behavior of the FortiGate-FortiManager (FGFM) tunnel reset during policy package installation. The FGFM tunnel reset is a brief interruption that occurs when a policy package is pushed to the FortiGate, causing the FGFM tunnel to restart and reconnect to the FortiManager.
Scope FortiGate, FortiManager.
Solution

To understand the FortiGate-FortiManager (FGFM) tunnel reset during policy package installation, follow these steps:

  1. Go to FortiManager -> Policy Packages -> Install to install a policy package to the FortiGate.
  2. The FortiGate will restart the FGFM tunnel after each installation and attempt to reconnect to the FortiManager.
  3. This brief interruption is an expected behavior, as documented in the FortiManager administration guide: Install policy package.
  4. The FGFM tunnel reset is not related to user login or super admin actions, but rather a fail-safe behavior to ensure connectivity between the FortiGate and the FortiManager after policy package installation.

 

The screenshot below is an example of this behaviour:

 

image.png

 

After every policy push from the FortiManager (User admin@FortiManager), there is a log with description 'Central Management connectivity is inactive' followed by 'Central Management connectivity is active'. 
    Terms & ConditionsAccessibility statement
    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT