Troubleshooting Tip: How to fix the 'Unable to connect to central management' message after upgrading firmware version

[caunon]

Description	This article describes how to resolve a situation where the 'Unable to connect to central management' message appears after upgrading the firmware version of FortiGate.
Scope	FortiGate v7.x.
Solution	After upgrading the firmware version, FortiGate may show a notification in the top right that states 'Unable to connect to central management'. When this occurs, FortiGate/FortiManager Cloud settings become unavailable. This can be fixed via the GUI or CLI commands. In the GUI: Check the DNS settings and make sure that the DNSs are not 'Unreachable'.   In the CLI: Check the DNS settings and make sure that the DNSes are not 'Unreachable'. diagnose test application dnsproxy 2 worker idx: 0 worker: count=1 idx=0 retry_interval=500 query_timeout=1495 DNS latency info: vfid=0 server=96.45.45.45 latency=-1 updated=105 vfid=0 server=96.45.46.46 latency=-1 updated=105 SDNS latency info: DNS_CACHE: alloc=0, hit=0 RATING_CACHE: alloc=0, hit=0 DNS query: alloc=7 From the Firewall CLI: config system dns set primary 96.45.45.45 set secondary 96.45.46.46 set protocol dot <----- Set protocol cleartext. set interface-select-method specify <----- Set interface-select-method auto. set interface "port3" end config system dns set primary 96.45.45.45 set secondary 96.45.46.46 set protocol cleartext set interface-select-method auto  end If the issue persists, try to restart the FortiCloud daemon. # fnsysctl killall forticldd If this does not work, go to Security Fabric -> Fabric Connectors -> Security Fabric Connectors -> Central Management. Select 'Central Management' and select Edit.   Go to Central Management Settings -> Settings -> Status: Select 'Disabled' -> OK.   Try to select another tab and select Security Fabric -> Fabric Connectors, or log out and log in again. The 'Unable to connect to central management' error message in the top right will disappear after doing so.   Via CLI commands: Run the following commands in the FortiGate CLI: config system central-management set type none end Log out and log in again. The 'Unable to connect to central management' error message in the top right will disappear after doing so. FortiManager Cloud: In some scenarios, the DNS resolves fortimanager.forticloud.com but FortiManager Cloud connection fails or is not managed, and the debug shows no output: diagnose debug application fgfmd -1 diagnose debug enable If this is the case, check the interface used for traffic. If SD-WAN is configured, try using SD-WAN and review the debug output to see if it resolves the issue. config system central-management set interface-select-method sdwan end For further troubleshooting between FortiGate and FortiManager Cloud, see Troubleshooting Tip: How to connect FortiGate to FortiManager Cloud and troubleshoot connectivity is.... Related articles: Technical Tip: FortiGuard Flags and Meanings  Technical Tip: FortiGate Central Management: FortiGate Cloud connection status 'Not Managed'  Troubleshooting Tip: Unable to connect to FortiGuard servers