FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ssanga
Staff & Editor
Staff & Editor
Article Id 348970
Description

This article explains how to mitigate the error 'CMDBError: 403: Access denied.' seen on GUI while revoking the FortiToken of a remote user account on the FortiGate.

Scope FortiGate v7.4.2, v7.4.3, v7.4.4, v7.6.0.
Solution

The following error is seen on the GUI of FortiGate when trying to revoke FortiToken to a remote user Account under User & Authentication -> User Definition, 'right-click' on the remote user account,  revoke the Token, and select 'Ok'.


RevokeToken.png

 

However, the error is not seen when trying to revoke the FortiToken of a local user account. The issue is resolved in v7.4.5 and v7.6.0

Workaround:

Disable two-factor using CLI commands:

 

config user local

    edit <username>

        set two-factor disable

    next

end

Contributors