Technical Note: Unable to access FortiGate VM via GUI

[fortega]

Description

When trying to connect via the GUI to the FortiGate VM it is possible to receive the following message and the GUI cannot be accessed.

This will occur if the FortiGate VM cannot connect to the FortiGuard servers to register the license.

Scope

FortiGate VM v5.4.x & v5.6.x

Solution

Try to access via SSH to the FortiGate VM and review the connectivity with FortiGuard servers.

Useful debug:

#diagnose debug reset
#diagnose debug application update -1
#diagnose debug enable
#execute update-now

If the result is similar to the following, review with the ISP to assure that port 443 is not blocked:

upd_act_setup_with_action[190]-Trying FDS 173.243.138.68:443
tcp_connect_fds[231]-select() timed out
upd_comm_connect_fds[423]-Failed TCP connect

Once the FortiGate VM connects successfully to the FortiGuard servers, access will again be allowed to the GUI management.