Technical Tip : Not able to apply any new...

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 273332

Description

This article describes the scenario where the unit is not able to apply any new config on the FortiGate and how to fix it.

Scope

FortiGate.

Solution

Sometimes, the FortiGate is not able to configure anything or edit. Selecting apply will not work, and it keeps loading.

For example, Create the address object below:

After selecting OK, it keeps loading the page and it will take much time or it will never make changes.

fortigate-screenshot (2).PNG

Solution:

Restart the cmdbsvr process, where it is related to update processes and configuration.

To restart the process, use the following command:

fnsysctl killall cmdbsvr

To check all the processes use the command:

diagnose sys top

fnsysctl ps

If while configuring an IPSEC VPN on a FortiGate-60F, the device becomes unresponsive via the web interface after saving the configuration, and the only available connection is SSH with the cmdbsvr process consuming nearly 100% of the CPU, consider using the recommended FortiOS version for the specific model.

Related article for the FortiGate process:

2440

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip : Not able to apply any new config

You are leaving our website