FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
Adam_Shortt_FTNT
Article Id 214839
Description

This article describes how Fortinet Support may advise monitoring the system at the console under specific circumstances.

The process to do so is outlined below.

Scope FortiGate, FortiAP.
Solution

A few prerequisites are needed:

  1. Download a terminal emulator tool such as Putty. A listing of emulators that may also work is listed here.
  2. If the management device does not have a serial port:

Once the above items are ready, proceed as follows:

 

  1. Connect the Serial to the USB adapter to the PC. Open the Device Manager and under 'Ports' see a COM port associated with the adapter. Make note of the COM port number.

    If there is no Ports section listed, ensure the proper drivers are installed for the adapter to function.

  2. Connect the serial adapter to the rollover cable. Connect the RJ-45 end of the rollover to the FortiGate’s 'Console' port.
  3. Launch Putty. Ensure the following settings are set.

Session tab:

 

Adam_Shortt_FTNT_0-1655397340652.png

 

Set 'COM1' to the correct port number noted in step 1. For example, COM3.

 

To check which 'COM' port to select, open Device Manager and check under the 'Ports (COM & LPT)' section:

  1. To open Device Manager, Press 'Windows + R' on the keyboard, type 'devmgmt. msc' without the quotes, and press Enter.
  2. Device Manager will open. Select the Ports (COM & LPT) to expand it. The COM port that's to be entered in Putty will be seen here:
     

comport.png

 

Logging Tab:

Select 'All session output', select browse and save the log file to a location that can be found later. Consider adding a name and date to it.

 

Serial Tab:

Set the correct COM port number if it is not present already. Ensure the below settings are set:

 

Adam_Shortt_FTNT_1-1655397340654.png

 

Back on the session tab, save this connection profile for future use:

 

Adam_Shortt_FTNT_2-1655397340658.png

 

Now that Putty is set up, select 'Open'.

Any key needs to be hit for the console to refresh. If all going well the login prompt can be seen. Login with the admin credentials.

 

If the 'Ports (COM & LPT)' section is not visible in Device Manager:

 

image - 2024-10-23T121500.573.png

 

In some cases, the 'Ports (COM & LPT)' section may not appear in Device Manager, even after the adapter is connected and drivers are installed. This can prevent from proceeding with further steps that rely on identifying the correct COM port. To resolve this issue, follow the instructions below:

 

  1. Press 'Windows + R' on the keyboard, type hdwwiz.cpl, and press Enter to open the Device Manager.
  2. In the Device Manager window, Select Action in the top menu and select Add Legacy Hardware.

 

image - 2024-10-23T121906.918.png

 

  1. The Add Hardware Wizard will appear. Select Next, select Install the hardware that I manually select from a list (Advanced), and Select Next.

 

image - 2024-10-23T123014.890.png

 

image - 2024-10-23T123020.267.png

 

 

  1. Scroll down and select Ports (COM & LPT), then Select Next.

 

 

image - 2024-10-23T123347.927.png

 

 

  1. Select the manufacturer and model of serial port from the list or choose the default Communications Port option, and select Next.

 

 

image - 2024-10-23T123351.816.png

 

 

  1. Complete the wizard to manually install the port. Once done, the "Ports (COM & LPT)" section should now appear in Device Manager, and proceed with identifying the correct COM port for the adapter.

 

 

image - 2024-10-23T124353.862.png

 

Now Ports (COM & LPT) should be visible under Device Manager.

 

Follow any additional instructions from Fortinet Support.

 

For FortiAP:

   

Set the Speed (baud rate) to 115200 on putty.

After setting up the configuration, Select Open to start the console session

Once the terminal session is open:

  1. Press Enter on the keyboard to initiate the connection.
  2. Log in. Use the default credentials unless they have been modified:
      • Username: admin
      • Password: (Leave this blank if it's a new FortiAP, otherwise enter the custom password)
  1. After logging in, the FortiAP command line interface will be accessible (CLI).

 

Steps to Save Logs of a PuTTY Session

    • In the PuTTY Configuration window, before starting the session, navigate to the Category pane on the left side.
    • Expand the Session tree and Select on Logging (under Session -> Logging).
    • In the Logging options window, select All session output to log everything from the session (choose other options such as logging only printable output, SSH packets, or SSH packet data).
    • Under Log file name, specify the path where to save the log file.
      • For example, type C:\logs\putty.log to save the log to a folder named 'logs' on the C: drive.

Further,  look into the datasheet of a particular FortiAP to check the console port location on the FortiAP.