FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ksolovjova
Staff
Staff
Article Id 247417
Description

 

This article describes that In some cases, it can be necessary to simulate a crash on the FortiGate to see how the environment would respond to this event or how the SNMP manager would log it.

 

Scope

 

FortiGate v7.2.4 and 7.0.11, only VM versions.

 

Solution

 

A new set of commands allow the super admin user to simulate a kernel crash.

As a result, the FortiGate-VM will safely reboot without any adverse impact on the system. 

In the console, the kernel crash output will be shown.

 

Fortigate-ESX # diagnose debug kernel sysrq ?
enable   <----- Enable magic SysRq.
disable  <----- Disable magic SysRq.
status   <----- Show the status of magic SysRq.
command  Magic SysRq command.

 

Fortigate-ESX # diagnose debug kernel sysrq enable

 

Fortigate-ESX # diagnose debug kernel sysrq status
Magic SysRq is enabled (val=0x8)

Fortigate-ESX # diagnose debug kernel sysrq command ?
crash    <----- Perform a system crash.

 

Fortigate-ESX # diagnose debug kernel sysrq command crash
This operation will generate a kernel crash and cause the firewall to reboot.
Do you want to continue? (y/n) y

 

Sample kernel crash output (visible only in the console):

 

ksolovjova_0-1677530703539.png

 

Entries about the unexpected shutdowns and starts will be recorded in System Event logs:

 

date=2023-02-27 time=21:40:30 eventtime=1677530427252368729 tz="+0100" logid="0100032009" type="event" subtype="system" level="information" vd="root" logdesc="FortiGate started" msg="Fortigate started"


date=2023-02-27 time=21:40:25 eventtime=1677530410132242115 tz="+0100" logid="0100032200" type="event" subtype="system" level="critical" vd="root" logdesc="Device shutdown" msg="Fortigate had experienced an unexpected power off!"

Contributors