Technical Tip: Rapid7 VA scan fails with the error message 'Inconclusive host'

[Marit]

Description	This article describes how to resolve VA scan (Rapid7) failures where the scan result shows an 'Inconclusive host' message.
Scope	FortiGate, VA scan.
Solution	Use Case: An environment with two FortiGate devices configured with FGCP (FGT-1 Active / FGT-2 Standby). A VA scan is performed on both FortiGates simultaneously. FGT-1 passes the VA scan, while FGT-2 fails the VA scan. Troubleshooting: Failing over HA and re-scanning does not resolve the issue. FGT-1 continues to pass the VA scan, while FGT-2 continues to fail. Solution 1 (if both FortiGates must be scanned at the same time): Run a VA scan on both FortiGates. Collect the results from the Active FortiGate. In the Rapid7 console, delete the scan result object for the Standby FortiGate. Perform an HA failover. Run a VA scan on both FortiGates again. Collect the results from the new Active FortiGate. Solution 2 (recommended): Run a VA scan on the Active FortiGate. Perform an HA failover. Run a VA scan on the new Active FortiGate. Note: For full details, refer to the Rapid7 documentation: Troubleshooting “Inconclusive host with excessive port connection failures”