Skip to main content
Shantilal1998
Explorer II
January 15, 2025
Question

User daemon-admin restored the image from ha-daemon

  • January 15, 2025
  • 10 replies
  • 3576 views

Hi Team,

 

Today I found a user event log as below 

 

User daemon-admin restored the image from ha-daemon 

 

And my firewall automatically upgraded from 7.4.5 to 7.4.6.

 

Kindly confirm whether it is genuine or not. 

10 replies

Shantilal1998
Explorer II
January 15, 2025

also found the below event also

 

User daemon-admin changed hostname global setting to <name> from cmdbsvr

Shantilal1998
Explorer II
January 15, 2025

Also, Why it also changed the hostname ?

 

dingjerry_FTNT
Staff
Staff
January 15, 2025

Hi @Shantilal1998 ,

 

For your FGT automatic upgrade from 7.4.5 to 7.4.6, it might be due to the new "automatic firmware upgrades" feature:

 

https://docs.fortinet.com/document/fortigate/7.4.5/administration-guide/369092

 

For the logs about "User daemon-admin", could you please share all of them?

Shantilal1998
Explorer II
January 15, 2025

These are the following logs generated for User daemon-admin:

 

User daemon-admin changed hostname global setting to VW-02 from cmdbsvr

User daemon-admin changed timeout global setting to 60m from cmdbsvr

 

Kindly share the reasons for the above logs...

 

 

dingjerry_FTNT
Staff
Staff
January 15, 2025

Hi @Shantilal1998 .

 

1) Is VW-02 a new hostname or it is an existing hostname?

2) Was the timeout global setting set to 60m before?

3) Is there any timestamp with those two logs?  And is there a system log for system rebooting?  

 

If yes for both, I guess the timestamp of the system reboot is earlier than those two "User daemon-admin" logs.

 

 

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!