FortiManager Cloud update pushing TACACS logging - failing when installing

5 replies
3975 views

Hey all,

I recently updated our FortiManager instance to v7.4.5 build5874.

After doing so, I was trying to install a device + policy package to a test firewall.

For some reason, it is trying to append the following commands whenever I try to install, even though I did not configure these settings:

config log tacacs+accounting filter

set cli-cmd-audit enable

config log tacacs+accounting2 filter
set cli-cmd-audit enable

config log tacacs+accounting3 filter
set cli-cmd-audit enable

all 3 fail with the same message:
CLI audit log needs to be enabled in global setting to enable CLI command audit for TACACS+ accounting!
node_check_object fail! for cli-cmd-audit enable

I've tried the command

config system global      set cli-audit-log enable  end

But the same error persists.

Just not sure where these commands are coming from in FortiManager or what I have to do to fix. I appreciate any help!

untjc1

New Member

I'm having the exact same behavior as well. This smells like a FortiManager bug, similar to the ones they had in 7.4.4 and 7.4.3.

kmusk01

New Member

Did you ever get this fixed? I upgraded and I am having the same issue :( I guess I need to make a TAC ticket.

Grifter

New Member

did you get a solution from TAC for this, i just upgraded to 7.4.6 and got the same issue?

Grifter

New Member

Updating fromCLI failed, but from fortimanager under the FGT system -> settings -> advanced -> cli-audit-log. set this setting to enabled and it fixed the issue