FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
iskandar_lie
Staff
Staff
Article Id 254542

Description

 

This articles describes how to identify why the FortiGuard Controller server status may show as 'unregistered' and fix the issue.

 

Scope

 

FortiOS 6.4.x onward.

 

Solution

 

# execute fortiguard-message info
Controller server status: unregistered
Expiry date: 19691231 <- YYYYMMDD format.
SMS max allowed: 0
SMS used: 0
Last update: Sat Apr 29 12:45:33 2023

 

# diagnose test application forticldd 5
Server: message-server, task=0/100, watchdog is off
Address of message-server: 1
208.91.113.184:443
--truncated---
Current address: 208.91.113.184:443
Source IP: 0.0.0.0:0
Calls: connect=0, rxtx=0
Current tasks number: 0

FGT1 # diagnose test application forticldd 9
Server: Contract-controller, task=1/10, watchdog fires in 549 secs
Domain name: mgrctrl1.fortinet.com
Address of Contract-controller: 1
208.91.113.109:443
--truncated---
Current address: 208.91.113.109:443
--truncated---

 

To generate logs related to this issue:

 

# diagnose debug application forticldd -1

# diagnose debug enable

# execute fortiguard-message update
Update command sent.

 

[3274] fds_handle_request: Received cmd 101 from pid-13652, len 0
[41] fds_queue_task: req-101 is added to message-controller
[579] fds_https_start_server: server: 208.91.113.184:443
--truncated---
[483] fds_https_connect: https_connect(208.91.113.184:443) is established.
[288] fds_svr_default_on_established: message-controller has connected to ip=208.91.113.184:443
--truncated---    
[105] fds_print_msg: ResponseItem=HomeServer:208.91.113.184

 

The following is the contract information extracted from the FortiGuard server:

 

[105] fds_print_msg: Contract:19691231     
[105] fds_print_msg: NextRequest:86400
[105] fds_print_msg: Quota:0
[105] fds_print_msg: Used:0
--truncated---

 

Since the FortiGuard SMS contract has expired, it is necessary to renew the license:

 

Once the renewal is successful, run the following:

 

# execute fortiguard-message info
Controller server status: registered
Expiry date: 20240331 <- Contract is active until March 31st, 2024.
SMS max allowed: 100
SMS used: 0
Last update: Sat Apr 29 13:45:33 2023

 

Note:

If it is unclear whether this license was purchased, contact Fortinet TAC or customer service for further assistance. Attach the logs obtained with the instructions in this article for more effective assistance.

 

Refer to the following article for more information about how to renew the license after getting activation code/purchase:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-active-FortiSMS/ta-p/191635.