Technical Tip: FortiGate E Series Firewalls Unable to Manage FortiAP-231K access points

[gvenkatesan]

Description	This article describes why certain E Series FortiGate firewalls are unable to manage the FortiAP-231K access point as expected.
Scope	FortiOS v7.4.5 GA and above, v7.6.1 GA and above. FortiAP v7.4.5 GA.
Solution	Issue: Some E Series FortiGate firewall models are unable to manage the FortiAP-231K running FortiOS version 7.4.5 (GA). Note: This information has been updated in the Fortinet Compatibility Matrix. Symptoms: The FortiAP can discover the FortiGate as expected. However, the FSM (Finite State Machine) state transitions repeatedly between SULKING and DTLS_SETUP. This behavior can be observed via the FortiAP CLI using the command: wcfg | grep fsm-state Root Cause: The FortiAP-231K lacks certain self-signed CA certificates, which leads to a failure during the DTLS setup phase. Solution: Upgrade the FortiAP-231K to firmware version 7.6.2 build 0972 GA to ensure proper management by the FortiGate firewall.