FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ibituya
Staff
Staff
Article Id 360378
Description

This article describes how to troubleshoot if the task is failing on the FortiCloud Overlay-as-a-Service (OaaS) portal with the error: 'Failed to delete the zone of your device'.

Scope

FortiGate 7.4.4 or later, FortiCloud Overlay-as-a-Service (OaaS).

Solution

To access the FortiCloud Overlay-as-a-Service (OaaS) portal, refer to this guide: Accessing the OaaS portal.

 

If applying the configuration from the Overlay-as-a-Service (OaaS) portal returns with Failed status given the following task details, refer to below:

 

Task ID: 1

User: 1

Device: FGT1111111111111

Field: system/sdwan

Status: 500

Detail: Failed to delete the zone of your device.

Suggestion: Please click retry or delete the zone settings of your device manually.

 

Run this command on the FortiGate to verify the configuration sync status:

 

get oaas status

 

ibituya_0-1732686111792.png

 

If the error shows for the target path 'system/ sdwan / service', check the SD-WAN service rules from either the FortiGate GUI under Network -> SD-WAN -> SD-WAN Rules or by running the below command:

 

show system sdwan

 

ibituya_1-1732686111796.png

 

config system sdwan

    set status enable

        config zone

            edit "virtual-wan-link"

            next

        end

        config members

         …

        config health-check

         …

        config service

            edit 2

                set name "FORTIGUARD"

                set internet-service enable

                set internet-service-name "Fortinet-FortiGuard"

                set priority-members 1 2

            next

            edit 1

                set name "INTERNET"

                set dst "all"

                set priority-members 1 2 3

            next

        end

end

 

By default, Overlay-as-a-Service (OaaS) will use ID 1 to store the default SD-WAN service 'oaas_default'.

 

To successfully apply the configuration from the FortiCloud Overlay-as-a-Service (OaaS) portal, migrate the existing service to use another ID by duplicating the existing service rule and deleting the existing rule using ID 1.