FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
jfelix09
Staff
Staff
Article Id 425979
Description

This article describes identifying and mitigating web service issues (NodeJS). 

This document outlines steps to enable additional logging and a temporary workaround.

Scope

FortiGate devices running FortiOS versions 7.4.10, 7.6.5, and 8.0.0.

Solution
  1. Enable web-svc-perf Logging:

Additional logs have been introduced in FortiOS versions 7.4.10, 7.6.5, and 8.0.0 related to the web service performance.

  • Access the CLI and execute the following commands:

 

config log settings
  set web-svc-perf enable
end

 

  • Restart the Node.js process to apply changes:

 

diagnose nodejs process restart

 

  1. Collect and Share Logs:

  • Download the web service (web-svc) logs (FortiGate GUI -> Log & Report -> System Events -> Web Service Events -> Select 'Download' button).

 

image (1).png

 

  • Share these logs with Fortinet support to help identify the microservice causing the issue.

 

  1. Temporary workaround:

If there is any issue related to the FortiGate web server services, a temporary workaround is available to periodically restart the Node.js process. This is not a preferred solution, but it can be used until the root cause is identified.

Enable automatic restart of the Node.js process:

 

config system global
  set web-svc-auto-restart enable
end

 

Note: This workaround should only be used as a temporary measure. It is crucial to collect and share logs to facilitate a permanent fix.

 

Related documents:

config log setting 

diagnose web-svc