Skip to main content
mrandrew
New Member
March 21, 2016
Question

SSH "as a service" Not Working on FortiWiFi Running 5.2.5

  • March 21, 2016
  • 2 replies
  • 3620 views

I use a product from Solarwinds called Cattools to automate nightly backups of the firewall configurations.  This software handles most every device on our network including Dell switches, Cisco Switches/Routers/Firewalls/Access Points, and FortiGates.  The software runs as a service on Windows Server 2008 R2.  Every night at 8PM, the schedule kicks off.  The software opens an SSH session to each device and does a Cisco equivalent of "show run" and saves the output to a file on the server.  I have 60D Fortigates running 5.0.7 and 2 800Cs in HA running 5.2.4.  All of these devices work fine.  I just deployed a FortiWiFi 60D running 5.2.5 and I cannot get this to work at all.  I contacted Solarwinds and they stated that this is documented as a bug by Fortinet.  The number they provided is 0300588.  I have support for this device, but I've been unable to get good information about this bug and when it will be fixed from support.  1.  I wondered from anyone out here if there was a secure page that customers can go to do bug research?  I can do this on Cisco's web page.  2.  If not, does anyone know anything about this.  We have to have this ability to backup the configuration for PCI compliance.  Cattools sends a report every day after the backups and will tell us if the configuration has changed.  There are some other file management things that the software does as well.

 

Thanks

 

mrandrew

2 replies

Toshi_Esumi
SuperUser
SuperUser
March 21, 2016

I know anything about the bug. But since you mentioned it works with 800C/5.2.4, I would recommend trying 5.2.4, or even 5.2.3. Either 5.2.4 or 5.2.5 introduced a different problem to our 60D installation to our customers. So we went back to 5.2.3.

mrandrew
mrandrewAuthor
New Member
June 29, 2016

Issue was resolved.  Received this from Fortinet:

 

“We are not supporting 1024 SSH algorithm in 5.2.7 or any new firmware beyond this via General Release (on 5.2.x family) You need to use tools that can support 2048”

 

Solarwinds released an update for Cattools that fixed the issue.  Version 3.11.

 

 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!