Skip to main content
Zayd
New Member
May 28, 2025
Solved

fortigate firewall suddenly not working with cisco ise as Radius server

  • May 28, 2025
  • 9 replies
  • 2900 views

Hello,

I am facing an issue with fortigate firewall in cluster a-p, both are integrated with cisco ise working as Radius server.

Suddenly, we are seeing that Radius settings for ISE is failed; saying " can't contact radius server"

Fortigate version is 7.2.4

however, there is another set of FGT firewalls which are working fine.

Only difference is that these firewalls are in DMZ and ISE is behind mgmt firewalls which are working fine. So DMZ Fws talk via transit vlan.

Best answer by Zayd

@funkylicious , today the issue was resolved after enabling the ha-direct settings in HA settings.

 

9 replies

AEK
SuperUser
SuperUser
May 28, 2025

Hi Zayd

Does the second firewall have the same FOS (7.2.4)?

Can you confirm if the RADIUS request reaches ISE?

AEK
Zayd
ZaydAuthor
New Member
May 28, 2025

I dont see request reaching the ise.

yes both fgt has 7.4.2

 

AEK
SuperUser
SuperUser
May 28, 2025

You need to make sure RADIUS request from FG properly reach ISE.

E.g. if there is a firewall between them you need to allow the related traffic.

AEK
Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.