FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
mriswan
Staff
Staff
Article Id 353192
Description

 

This article describes the logs and debugs to be collected for device detection issues.

 

Scope

 

FortiGate.

 

Solution

 

Below are the logs and outputs to collect for device detection issues, such as when device details are incorrectly identified or the FortiGate is unable to detect the device details, before opening a TAC ticket.

 

get system status

show full | grep device-detection

diagnose autoupdate versions | grep -A 7 "Mac Addr"

diagnose user device get <MAC Address of device>

diagnose vendor-mac match <MAC Address of device>
diagnose user device list
diagnose cid stats
diagnose debug crashlog read

 

Additionally, collect the below debug while connecting the device to the network:

 

For v7.4:

 

diagnose debug reset

diagnose cid debug filter <MAC Address of device>

diagnose cid debug start    

diagnose cid debug stop

 

For v7.2:

 

diagnose debug reset

diagnose debug application cid -1

diagnose debug enable

 

For v7.0:

 

diagnose debug reset

diagnose debug application src-vis -1

diagnose debug enable

 

To stop the debug processes in the end, press 'Ctrl+C' and enter 'diagnose debug disable'.