FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
MigenaM
Staff
Staff
Article Id 329464
Description This article describes how to resolve the issue of only having five fctems connectors in the device instead of seven, as expected.
Scope FortiGate v7.2.4 and newer versions.
Solution

From v7.2.4, the number of the fctems connectors was raised from five to seven.

After upgrades or configuration changes, there might be cases where there are only five entries under fctems connectors instead of seven, as seen in the picture below:

 

fctems 5 entries.PNG

 

This behavior might bring issues with FortiManager synchronization in some cases. When trying to add more entries using the steps below, an error is usually present:

 

delorean-kvm44 # config endpoint-control fctems

delorean-kvm44 (fctems) # edit 6
Command fail. Return code 1

delorean-kvm44 (fctems) # next
Unknown action 0

delorean-kvm44 (fctems) # edit 7
Out of order EMS index, please add ID 6 next.
node_check_object fail! for ems-id 7

value parse error before '7'
Command fail. Return code -651

delorean-kvm44 (fctems) # next
Unknown action 0

delorean-kvm44 (fctems) # end

delorean-kvm44 #

 

What to do in this case:

  • Download a backup configuration file from the device.
  • Under 'config endpoint-control fctems', try to add two more entries as seen below:

 

config endpoint-control fctems
    edit 1 <----- Replace with the current config, just add the last two entries.
next
    edit 2
next
    edit 3
next
    edit 4
next
    edit 5
next
    edit 6  <----- Add entry.
next
    edit 7  <----- Add entry.
next
end

 

  • Add the configuration on the device again as a restore. After this step, there will be seven entries seen on the configuration in the device, which is the behavior that we are expecting:

 

fctems 7 entries.PNG

 

Note:

The same steps can be helpful in different scenarios as well when parts of the configuration are missing or cannot be deleted for some reason.