FortiAnalyzer
FortiAnalyzer can receive logs and Windows host events directly from endpoints connected to EMS, and you can use FortiAnalyzer to analyze the logs and run reports.
amatos
Staff & Editor
Staff & Editor
Article Id 335909
Description

This article describes how to resolve an issue related to the deployment of FortiAnalyzer Cloud. When accessing the support.fortinet.com website and selecting 'Services' and then 'FortiAnalyzer Cloud', the user is redirected to the FortiAnalyzer Cloud deployment page:

DeployFazcloud1.png
DeployFazcloud2.png
Then, after selecting 'submit', the user will receive the 'Fail to download license, please give it try later' a few minutes after the deployment started:


Failed to provision.png

Scope FortiAnalyzer Cloud.
Solution

Note that the option to deploy the FortiAnalyzer Cloud in the Asset Management page existing does not imply that the proper licensing and entitlement for the device is present in that account.

For example, it is possible to check in the 'Entitlement' option in the asset management the available entitlements for the devices. In the following example, the FortiAnalyzer Cloud entitlement is not present. It is necessary to verify the FortiAnalyzer entitlement for all devices in that account. If no devices have it, FortiAnalyzer Cloud cannot be deployed in that account.

No entitlment.png


Additionally, by selecting the 'page' option highlighted in the above screenshot, it is possible to verify further entitlement information as below:

No entitlment 2.png

 

A device with proper FortiAnalyzer Cloud entitlement would have an entitlement page similar to the following, meaning deployment would be possible.

Correct entitlment.png

 

If an entitlement is present but still not able to deploy a instance, open a technical support ticket in support.fortinet.com.

 

Internal accounts can only deploy a FortiManager/FortiAnalyzer cloud instance in region Vancouver. No other option can be used. If there is already a FortiManager cloud deployed in Frankfurt for example, it is recommended to delete the instance and re-deploy in Vancouver so the FortiAnalyzer cloud can be deployed in the same region.