Troubleshooting Tip: Removing Trusted Host restriction to restore admin GUI access in FortiSIEM

To resolve the issue of being unable to access the FortiSIEM GUI via the admin user account, follow these steps:

1. Log in to the FortiSIEM CLI using the root account.

2. Check the current Trusted Host settings by running the following command:

psql -U phoenix -d phoenixdb -c "select * from ph_sys_conf where property='Trust_Host'"

3. Remove the Trusted Host restriction using the command below:

psql -U phoenix -d phoenixdb -c "update ph_sys_conf set value='' where property='Trust_Host'"

4. Attempt to log in to the FortiSIEM GUI again using the admin account. By following these steps, the Trusted Host restriction should be removed, restoring GUI access for the admin account.

Note: In order to determine whether a login attempt is being blocked due Trusted Host restriction, it is possible to check the logs for PH_APPSERVER_LOGIN_ERROR in the App Server phoenix.log file located under /opt/glassfish/domains/domain1/logs:

2025-12-19 10:10:00,00  ERROR com.ph.phoenix.jsf.LoginBean - [PH_APPSERVER_LOGIN_ERROR]:[phCustId]=1,[eventSeverity]=PHL_ERROR,[errReason]=You have attempted to log in as administrator from an untrusted domain: 192.168.1.1,[phLogDetail]=Login error