FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
nradia_FTNT
Staff
Staff
Article Id 339129
Description This article describes how to resolve Issues running the scheduled backup using SFTP.
Scope FortiAnalyzer and FortiManager
Solution

The backup config task runs but fails with 'SFTP access denied. The reason is the password of the SFTP account contains special characters "(double quotes). 

 Once a new account is recreated with non-special characters in the password, the SFTP backup works fine.

 

For troubleshooting, it is possible to check the event logs to see if the schedule auto backup runs and use test commands to check SFTP or ftp communications.

 

It is possible to check the backup task from the event log and also check the SFTP access with the following command:

diagnose test sftp auth <sftp server> <username> <password> <directory>

 

Related document:

test | FortiAnalyzer 7.4.3 | Fortinet Document Library

 

Here is an example of an incorrect password:

 

nilesh1.png

 

Here, a password is set as pass”w.

The command line will never end because the FortiAnalyzer is expecting other double quotes.

 

nilesh2.png

 

Here is an example of the wrong local directory:

 

nilesh3.png

 

Here is an example of a successful login:

 

nilesh4.png

 

Related articles for SFTP and auto backup setup on the FortiAnalyzer:

Technical Tip: How to send automatic and scheduled system backup configuration

Troubleshooting Tip: Manual backup using SFTP