FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
dkochhar
Staff
Staff
Article Id 384561
Description This article describes an issue where the 'Default_AWS' object configuration gets changed after upgrade.
Scope FortiGate.
Solution

This happened after upgrading to v7.0.17 from any FortiOS version.

Run the following command to encounter the error:


diagnose debug config-error-log read

FGT(global) # diagnose debug config-error-log read
>>> "next" @ VDOM-XXX.system.sdwan.health-check.Default_AWS:failed command (error 1)

The 'Default_AWS' object is set to be removed in FortiOS v7.0.16. As a result, when upgrading from a version that includes this object to one that no longer supports it, the object cannot be loaded into the startup configuration.

Workaround:

  1. Change aws.amazon.com to another available probe server manually in the default health-check Default_AWS.

 

config system sdwan
    config health-check
        edit Default_AWS
            set server <x.x.x.x/fqdn>
        next
    end
end

 

  1. Remove the whole health-check 'Default_AWS manually.

 

config system sdwan
    config health-check
        delete Default_AWS
    end
end

 

This issue will be permanently resolved in FortiOS v7.0.17, v7.2.11, and v7.4.1.