Skip to main content
jackpr
jackpr
New Member
August 8, 2023
Question

FortiGate crash after first install from FMG

  • August 8, 2023
  • 1 reply
  • 1729 views

Hi,

 

We have a TAC case raised, but wanted to share/ask in the community.

 

I have had a strange issue with one 1800F cluster running 7.0.12 being onboarded onto FortiManger running 7.4.0.

 

The onboarding process completes. It discovers all VDOMS, and imports policies and objects successfully. 

 

Then, on the first install of the policy package and settings from FortiManager, the connection after 30 seconds drops to the FortiGate and all inbound traffic to the FortiGate (Virtual IP nodes) drops causing a complete loss of traffic.

 

All policies and objects are present on the FortiGate. Forward logs still show logs. Only a reboot of both members in HA fixes the issue.

 

Any thoughts aside from letting TAC investigate?

1 reply

agodbole
Staff
agodbole
Staff
August 8, 2023

Hi,

 

As per the compatibility matrix between Fortigate and Fortimanager  FMG version 7.4.0 is not fully compatible with FortiOS 7.0.12 and probably because of this you are seeing this issue.

https://fortinetweb.s3.amazonaws.com/docs.fortinet.com/v2/attachments/caebfdf7-dec0-11ed-8e6d-fa163e15d75b/fortimanager-compatibility-5.6.later.pdf

 

 

Also when installing the config, have you looked at the install preview?

jackpr
jackprAuthor
New Member
August 9, 2023

Hi, 

 

Yes - granted. But the compatibility issues do not reference the issues we are having. Unless there are more undocumented compatibility issues?

 

Looked at the install preview - all appears to be fine. The policy actually never installs on the FGT's - the attempt of a policy installations crashes some routing/forwarded dameon on the FGT's and kills any inbound traffic flow/packet processing

Terms & ConditionsAccessibility statement