|
To check the security level, it is required to run the command 'get system status' in CLI when the device is booted up successfully as shown below:
get system status
Version: FortiGate-VM64-KVM v7.2.8,build1639,240313 (GA.M)
Security Level: 1 <-- Security level 1 by default.
Firmware Signature: certified
Virus-DB: 92.04517(2024-05-22 18:26)
Extended DB: 92.04517(2024-05-22 18:25)
Extreme DB: 1.00000(2018-04-09 18:07)
AV AI/ML Model: 2.16284(2024-05-22 18:45)
IPS-DB: 6.00741(2015-12-01 02:30)
IPS-ETDB: 27.00791(2024-05-22 01:26)
APP-DB: 27.00789(2024-05-16 01:17)
FMWP-DB: 24.00052(2024-05-14 12:09)
INDUSTRIAL-DB: 27.00785(2024-05-13 23:42)
IPS Malicious URL Database: 5.00059(2024-05-22 07:03)
IoT-Detect: 27.00791(2024-05-21 18:18)
But if the device is stuck in boot up process it will display as below:
Booting OS...
Initializing firewall...
failed verification on /data/datafs.tar.gz
fos_ima: System Integrity check failed....
CPU0: stopping
CPU2: stopping
CPU4: stopping
CPU6: stopping
CPU3: stopping
CPU7: stopping
CPU5: stopping
It is required to check the security level in the configuration menu, power cycle the unit and press any key when seeing the message 'press any key to display configuration menu' as shown below:
Ver:05000009
Serial number: FGT60FTK2209HUVU
CPU: 1200MHz
Total RAM: 2 GB
Initializing boot device...
Initializing MAC... NP6XLITE#0
Please wait for OS to boot, or press any key to display configuration menu... <--
After entering the configuration menu, press 'I' to enter the system information:
[C]: Configure TFTP parameters.
[R]: Review TFTP parameters.
[T]: Initiate TFTP firmware transfer.
[F]: Format boot device.
[I]: System information. <<<<<<<<<
[B]: Boot with backup firmware and set as default.
[Q]: Quit menu and continue to boot.
[H]: Display this list of options.
Enter C,R,T,F,I,B,Q,or H:
Then press 'U' to enter the security level:
[S]: Set serial port baudrate.
[R]: Set restricted mode.
[T]: Set menu timeout.
[U]: Set security level. <--
[I]: Display system information.
[E]: Reset system configuration.
[P]: Normal POST test.
[Q]: Quit this menu.
[H]: Display this list of options.
Enter S,R,T,U,I,E,P,Q,or H:
The default security level [1] will be shown on the last line of the menu:
[0]: Level 0 - Check image silently
[1]: Level 1 - Check image with result only
[2]: Level 2 - Check image and reinforce validity
Enter security level setting [1]: .done <--
If the security level already changed to [0], but the device still is stuck in the boot-up process, it can be checked by re-entering the configuration menu, and the security level will be [0] as shown below:
Enter S,R,T,U,I,E,P,Q,or H:
[0]: Level 0 - Check image silently
[1]: Level 1 - Check image with result only
[2]: Level 2 - Check image and reinforce validity
Enter security level setting [0]: <--
|
