Skip to main content
heyyo
Explorer III
August 13, 2024
Question

previous I/O error to superblock detected on my USB flash disk partition

  • August 13, 2024
  • 2 replies
  • 1258 views

My plan is to restart my firewall, test the disk, and monitor if issue will still reoccur.

 

Moreover, I wanted to know if there is a way for the firewall to stop monitoring the status of a USB flash disk partition. The USB flash disk partition contains config file and firmware which we would use to restore the firewall.

 

To give you a background, our HA has failed over because of this SSD failure.

 

Thank you!

2 replies

nradia_FTNT
Staff
Staff
August 13, 2024

Not sure if there is way to stop monitoring the status of a USB flash disk partition. 

You can check following article to see if that is useful:

 

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-How-to-clear-short-of-flash-space-in/ta-p/274293

 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Standard-procedure-to-format-a-FortiGate-Log-Disk/ta-p/190473

 

 

AlexC-FTNT
Staff
Staff
August 13, 2024

From the security perspective, the only possibility to turn off USB "monitoring" would be to disable auto-install options on FortiGate.

There is no way to permanently disable it/shut it down. Also, we strongly recommend not to plug in anything in the USB port for more time than necessary. The port cannot be use to expand the storage or save logs. The config backup should be done on dedicated servers or Fortimanager. A permanently plugged in USB drive will eventually fail.


TestFG # config system auto-install

TestFG (auto-install) # show full
config system auto-install
set auto-install-config enable
set auto-install-image enable
set default-config-file "fgt_system.conf"
set default-image-file "image.out"
end

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.