FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
alif
Staff
Staff
Article Id 195835

Description

 

This article describes restoring the FortiGate configuration from GUI, the FortiGate is sometimes inaccessible via HTTP or HTTPS.
However, SSH or Telnet access to the FortiGate unit is still possible.

 

Scope

 

FortiGate.


Solution


The admin server certificate can not have been selected because HTTP/HTTPS access is not working.

 

As of now, the HTTP/HTTPS access is not available, 2 options are possible to proceed with.

  • Console connection: Connect the computer directly to the console port using RJ45 to db9 cable or RJ45 to USB cable.
     

Screenshot 2024-08-21 161348.png

 

  • SSH access: Using Putty, put the IP of the FortiGate along with the port number.
     

Screenshot 2024-08-21 161203.png

 

After the above steps select open and log in using the admin username and password.


To correct this behavior, use the following CLI commands to set the certificate to self-sign.

 

config system global
    set admin-server-cert {self-sign | Fortinet_Factory | <certificate>}
end

 

Once the server certificate is set, open the browser and try to access the FortiGate with its IP and port number.

 

Related Articles:

Technical Tip: How to change the port for the admin access to avoid port conflict

Troubleshooting Tip: Cannot access the FortiGate web admin interface (GUI)