Skip to main content
Ketanest
Explorer
July 15, 2025
Question

Has Forti SRA different GUIs?

  • July 15, 2025
  • 2 replies
  • 643 views

Hi together,

 

we are actually implementing Forti SRA for remote access for our admins. We installed the SRA VM in our DMZ, only one interface with a RFC1918 IP address. On the Fortigate in the datacenter we have a VIP forwarding an external IP to the SRA.

Connecting to the SRA is possible but it seems that there are two different GUIs in the SRA (look at the screenshots attached). Sometimes one appears, sometimes the other. We didn't find out yet on what it depends. If the "well-known" Fortinet GUI appears, there is a message

Connection to the interface IP address via the GUI is only used for uploading the license. All FortiSRA configuration should be performed by connecting to the proxy address

Also after logging in via this way if one accesses the secrets there is a message

The feature is not available on interface IP.

It does not depend on the browser used (Chrome, Edge, Firefox), the browser plugin is installed in every browser.

When the Forti SRA Login page appears everything is fine.

When connecting to the Proxy address as requested by on of the messages (https://FQDN:8080) there is a "PR_END_OF_FILE_ERROR".

 

Can anyone help with that? If there is more information needed, please advise which config options we should share.

 

2025-07-15 13_20_47-sra.birkenstock.com_login_redir=%2F.png2025-07-15 13_24_23-FortiSRA - BS-153-FortiSRA01 – Mozilla Firefox Privater Modus.png2025-07-15 13_24_36-FortiSRA - BS-153-FortiSRA01 – Mozilla Firefox Privater Modus.png2025-07-15 13_25_26-FortiSRA Login – Mozilla Firefox.png

2 replies

rbraha
Staff
Staff
July 23, 2025

Hi @Ketanest 

 

On the first screenshot after you are logged in , you should install FortiSRA license , after the license is validated you will be able to access it through vip interface configured on FPAM.

Please check installation and licensing guide.

 

https://docs.fortinet.com/document/fortisra/1.6.0/administration-guide/122682/fortisra-appliance-setup

Ketanest
KetanestAuthor
Explorer
July 24, 2025

Thanks for your reply! We followed the guide when setting it up. Is it necessary to use two different IP addresses? One for the physical interface (management gui) and one different for the vip (web portal)? The admin guide tells to enable synchronizing the virtual IP address to the IP address of the external interface so we thought it is sufficient to only use one address for SRA.

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!