FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
mpuente
Staff
Staff
Article Id 191099

Description

 
This article explains how to check the temperature value of different components for FortiGates with temperature sensors.
 
Small business to mid-end FortiGate models such as FG-40C through to FG-300C do not have temperature sensors.


Scope

 
FortiGates with temperature sensors. The list includes FG-3950B, FG-600C, FG-800C, FG-1000C and FG-3240C.


Solution

 
GUI:

The temperature for different components of the FortiGate can be checked in the GUI within the System Resources Widget under System -> Dashboard -> Status.

Only those models with temperature sensors will display this option. (Temperature, Power Supply Status, and Fan Status):

fsanchez_FD36793_tn_FD36793-1.jpg

Passing the mouse over the Temperature bar will display the current temperature for the different components. For Example for Power Supply 1:

fsanchez_FD36793_tn_FD36793-2.jpg

Configuration CLI:

From the CLI, there are two commands available to check the temperatures and alarms on the FortiGate. These commands will provide more information than the GUI:
 
execute sensor list --> It will list the sensor and readings of every component and show the current value, threshold, and alarm status (when the flag is set to 0, the component is working correctly and when the flag is set to 1, the component is not working properly).

An example:
 
FG800C # execute sensor list
 ...
23 PS1 Temp          alarm=0  value=40  threshold_status=0
24 PS1 Fan 1         alarm=0  value=6528  threshold_status=0
25 PS1 Fan 2         alarm=0  value=10112  threshold_status=0
26 PS1 VIN           alarm=0  value=230  threshold_status=0
27 PS1 VOUT          alarm=0  value=12.096  threshold_status=0
28 PS1 Status        alarm=0...
 
The previous snippet shows the values for the temperature on Power Supply 1 and the fans of that power supply.

The command: 
execute sensor detail will show extra information such as the low/high thresholds. For example:
 
FG800C # execute sensor detail
...
27 PS1 VOUT          alarm=0  value=11.97  threshold_status=0
    type=2/1
    upper_non_recoverable=13.167
    upper_critical=12.915
    upper_non_critical=12.6
    lower_non_critical=11.466
    lower_critical=11.088
    lower_non_recoverable=10.836
28 PS1 Status        alarm=0
    type=8/111
    upper_non_recoverable=0
    upper_critical=0
    upper_non_critical=0
...
 
When using VDOMs:
(global) # execute sensor list
(global) # execute sensor detail
 
If the device does not have a temperature sensor then the CLI command will return an error such as:
execute sensor list
command parse error before 'sensor'
Command fail. Return code -61

 

The upper threshold for CPU ON-DIE Temperature should be less than 110 degrees Celsius.
The displayed temperatures were read from inside the chip, not the surrounding temperature. Although there may be a maximum offset of 5 degrees Celsius, the readings still should fall within the specified range.

 

FGT80F # execute sensor list
[HW monitor sensors]
1 PSU [1] ....................... OK
2 PSU [2] ....................... LOST
3 CPU ON-DIE Temperature ........ 67.7 C  <- Should be less than 110C.
4 MV1548 Temperature ............ 82.0 C
5 MV1680 Temperature ............ 77.0 C