FortiClient
FortiClient proactively defends against advanced attacks. Its tight integration with the Security Fabric enables policy-based automation to contain threats and control outbreaks. FortiClient is compatible with Fabric-Ready partners to further strengthen enterprises’ security posture.
btan
Staff & Editor
Staff & Editor
Article Id 387370
Description This article describes how to troubleshoot FortiClient EMS v7.4.3 GUI being inaccessible after migrating from FortiClient EMS v7.2.x.
Scope FortiClient EMS v7.4.3.
Solution

After completing the steps in Migration Documentation, the migration tool shows 'EMS Migration Successfully completed'.

 

417pm-migrate-success.PNG

 

When trying to access the EMS v7.4.3 GUI via the browser, it shows 'This site can't be reached'.

 

10527417-apr-kb1.PNG

 

The steps to troubleshoot this are:

  1. In the Linux server, run the command: 

 

systemctl --all --type=service | grep -E 'fcems|apache|redis|postgres'

 

apr-kb1-1.PNG

 

  • apache2.service is active and running.
  • ecsocksrv.service is looping in auto-restart state.
  • The rest of the services are active and running (except for postgresql.service will be in 'exited' state, which is normal).

 

  1. Run the command: 

 

emscli config get console allowed.hosts

emscli config get console remote.access

 

The result shows:


emscli config get console allowed.hosts
allowed.hosts => *

emscli config get console remote.access
remote.access => disabled

 

This indicates that the Remote HTTPS access is disabled after EMS migration, which is the root cause of the issue.

 

  1. To resolve this, run command:

 

sudo -i
/opt/forticlientems/bin/emscli config set console --enable.remote.access

Afterwards, verify by command: 

/opt/forticlientems/bin/emscli config get console remote.access

-> It should show remote.access => enabled.

 

  1. Now, access EMS GUI in the browser, it should be accessible.

Contributors