Fortianalyser problem, two RMA and lost of logs.

Forum|Forum|9 years ago
April 24, 2017
5 replies
9465 views

Last week I updated my Fortianalyser 400E from FAZ_400E-v5-build1082-FORTINET.out to FAZ_400E-v5-build1151-FORTINET.out

After that the device won't boot at all. I logged a ticket to support and passed two hours trying to make it boot. We formated the boot partition multiple times, uploading and finally the support offered me an RMA.

New device come in, same issue won't pass the booting process.

I created another ticket and they issued another RMA.. should have my new device soon.

Did this happen to one of you? Is someone can help me getting out my logs from the first device that failed? The support told me this was "difficult" when the fortios don't boot. I'm able to go in the IPMI we console as the server is a supermicro but I can't boot on another operating system, the bios is password protected.

Here what we see from COM port, it stuck after the last line on both devices.

Reading boot image 3597061 bytes. Initializing FortiAnalyzer...

The disk was not unmounted properly. You should run 'diag sys fsck harddisk'.

Initialize file systems... Old version: v5.4.2-build1151 branchpt1151 161213 (GA) New version: v5.4.2-build1151 branchpt1151 161213 (GA) Global DB running version is 428, built-in DB schema version is 428

scao_FTNT

Staff

can you help do a check if downloaded image checksum is same as below?

ef9ad791270ea6cdd62f4687d6ebcd112b7e0e032cb8515f4c8f7b391041607439ce38918b973584d91a83039a158ca8c7da2c8995f1057b97a50cf01970378c FAZ_400E-v5-build1151-FORTINET.out and can you send me your ticket ID so I can follow up your case? Thanks Simon

jeanericAuthor

New Member

I don't know from where your checksum come from but I already done a check if my image file was right, from the MD5 checksum code show on fortinet download page: db141a09c9d539bd5f2c7b2c99d71f8e

My first ticket is 2153958 and my second is 2162432

Do you have any info about the password needed when connected with a screen on the device? At boot it offer to press DEL or F11 but after it ask for a password, probably protected from bios. Without it and the impossibility to boot on FortiOS I'm kind of stuck because of the hardware.

Regards

JeanEric

scao_FTNT

Staff

sorry, my provided one is sha512 checksum and md5 is the one you provided

I will do a check for your tickets

Thanks

Simon

pushpawela

Visitor III

We encountered a similar issue with the FortiAnalyzer VM on ESXi—suddenly, the GUI became unresponsive, and the login credentials stopped working. Upon opening a support ticket with Fortinet, we were advised to redeploy the VM. If we proceed with redeployment, is it possible to remount the existing virtual hard disk to recover our data? Will this approach work?

Sign up

Login with SSO

Login to the community

Login with SSO