Technical Tip: FortiPAM GUI HTTP services not available

Description

This article describes the issue where the configuration of HTTP for FortiPAM GUI access is not available.

Scope

FortiPAM.

Solution

When trying to set 'allowaccess http' under the interface, it will give the error 'HTTP cannot be set manually'.

This is because the access to FortiPAM GUI supports HTTPS only, and it does not support HTTP.

• Running command 'show firewall VIP' will show the configuration for FortiPAM GUI access, which is through access-proxy and the server-type is set to HTTPS.
  
  

HSTS is not required by FortiPAM GUI as there is no HTTP access, hence, FortiPAM does not support HSTS.

By default, FortiPAM’s GUI portal is open to all users.

Roles determine what each user can view or do in the GUI.

Enable/disable GUI web access from Network -> Interfaces -> [interface] -> Service Access Setting -> GUI Portal:

Collect below debug logs for GUIissue:

diagnose wad debug enable category http
diagnose wad debug enable category gui-api
diagnose wad debug enable level verbose
diagnose debug application httpsd -1
diagnose debug console timestamp enable
diagnose debug enable