Skip to main content
MikeyMike
New Member
November 27, 2014
Solved

No VPN Charts/Datasets work after Firmware Update

  • November 27, 2014
  • 3 replies
  • 8608 views

Upgraded firmware on the Analyzer to 5.0.8 and now when I try running the built in VPN Report, none of the charts return any information.  Says "No Data".

 

Any ideas?

Best answer by scao_FTNT

Hi, Mikey, what is your report run period? if for last 7 days, then it will not check for today's log.

 

thanks

 

Simon

3 replies

MikeyMike
MikeyMikeAuthor
New Member
November 27, 2014

My other reports seem to be just fine.  Just vpn doesn't return any data.  Fortigate is running 5.0.7

hzhao_FTNT
Staff
Staff
November 27, 2014

Hi,

 

In order to get more accurate results, in new VPN report, we used action='tunnel-stats' instead of tunnel-up/tunnel-down to get vpn info. However FGTs do not send tunnel-stats info by default, we have to configure FGTs by: config system settings set vpn-stats-log ipsec ssl set vpn-stats-period 300 end Most of empty VPN report issue should be fixed after above commands executed on fortigates.   Regards, hz

MikeyMike
MikeyMikeAuthor
New Member
November 27, 2014

Hi Hz,

Made the change on my fortigate but still No Data from the Datasets.  Is there anything else I can do or should I just wait a bit?

 

Thanks so much for your help!

 

--

Mike

 

 

 

hzhao_FTNT wrote:

Hi,

 

In order to get more accurate results, in new VPN report, we used action='tunnel-stats' instead of tunnel-up/tunnel-down to get vpn info. However FGTs do not send tunnel-stats info by default, we have to configure FGTs by: config system settings set vpn-stats-log ipsec ssl set vpn-stats-period 300 end Most of empty VPN report issue should be fixed after above commands executed on fortigates. Regards, hz

scao_FTNT
Staff
scao_FTNTAnswer
Staff
November 27, 2014

Hi, Mikey, what is your report run period? if for last 7 days, then it will not check for today's log.

 

thanks

 

Simon

scao_FTNT
Staff
Staff
November 27, 2014

actually we are working on a fix for next patch release (5.2.1) to let VPN report still work for old VPN log (which does not have below CLI enabled)

 

config system settings set vpn-stats-log ipsec ssl set vpn-stats-period 300 end

 

Thanks

 

simon