Description | This article describes the issue when the reference object is a firewall sniffer. |
Scope | FortiGate. |
Solution |
From the Global VDOM, the port can be changed from one VDOM to another, see here. However, sometimes a reference object causes an issue; to resolve delete the reference object, and then the link can be changed. Go to Network -> Interfaces -> Select the interface in question, and always check for references.
For changes such as moving the interface from one VDOM to another, there should be no references.
References can be a simple sniffer that was run on the interface (in this case), but are not restricted to it; it can be an address, an address group associated with the interface, firewall policies, and more. Make sure there are no references before changing the interface.
To delete the sniffer reference, go to CLI:
config vdom edit <vdom-name> config firewall sniffer show <--It will display associated sniffers. delete <sniffer name>
Once all the references are deleted, the VDOM can be changed.
Below is the workaround for it:
|
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.