Skip to main content
RolandBaumgaertner72
New Member
January 25, 2024
Question

CLI Sniffer downst work after update to 7.4.2

  • January 25, 2024
  • 2 replies
  • 3834 views

Hi,

 

so strange, we did an update for a FG81E Cluster to 7.4.2 and in the CLI we cant do any sniffing:

 

FG_XXX_Master $ diag sniffer packet any "host 128.1.98.88" 4
Unknown action 0

 

Always the same, Unkown action 0

 

Other FGs with also 7.4.2 just work fine.

 

What can that be?

 

Thanks!

 

 

2 replies

RolandBaumgaertner72
New Member
January 25, 2024

Hi,

 

I just see that on this FG we dont have a super__admin. It seems that this is the problem. I have a prof-admin who has all rights but comparing with other FGs the super-admin you cant even change the rights.

 

So can we add again a new super admin?

 

Thanks,

Rland

RolandBaumgaertner72
New Member
January 25, 2024

Hi,

 

now I get it. We had some time ago a problem with an HA update so that we had to reset one FG and build the HA from scratch. I guess the problem is that we used a backupf file from a prof_user and not a super_user.

 

Any other chance to create a new super-user instead of using one old config file?

 

Thanks

AEK
SuperUser
SuperUser
January 25, 2024

Hi Roland

Yes this may happen when we restore a prof_admin backup.

Try reset the admin password via this procedure.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Resetting-a-lost-admin-password/ta-p/197045/redirect_from_archived_page/true

Otherwise if unsuccessful then you'll probably have to factory-reset and restore a valid backup.

AEK
RolandBaumgaertner72
New Member
January 25, 2024

Hi,

 

no we have now 7.4.2 and there is no option for maintainer :(

 

It is not a really important branch, but I dont get why we cant use diag with this prof-admin who has all rights. Any chance to change that?

 

Thanks!