Troubleshooting Tip: Unable to Create the GEO block policy in the firewall

[knaveenkumar]

Description	This article describes the case when creating a geo-location it is impossible to see that option in the policy and get this error on debug 'No space left on device'.
Scope	FortiGate.
Solution	While checking to debug it getting an error like 'Failed to copy new obj file /tmp/upd5DQ7fR to /etc/geoip_db.gz, errno=28, No space left on device'. Currently, no space is available for the GEO version on this device. IP Geography DB. Version: 0.00000 Contract Expiry Date: n/a Last Updated using manual update on Tue Nov 30 00:00:00 1999 Last Update Attempt: Sat Jul 20 11:16:09 2024 Result: Installation failed NHJCFWL006106 # fnsysctl df -h Filesystem Size Used Available Use% Mounted on rootfs 504.2M 69.1M 435.1M 14% / tmpfs 504.2M 69.1M 435.1M 14% / none 661.2M 49.5M 611.7M 7% /tmp none 661.2M 496.0K 660.7M 0% /dev/shm none 661.2M 21.5M 639.7M 3% /dev/cmdb /dev/mtd5 18.0M 16.1M 1.8M 90% /data /dev/mtd7 30.0M 24.2M 5.7M 81% /data installUpdateObject[342]-Step 1:Unpack obj 28, Total=1, cur=0 installUpdateObject[371]-Step 2:Prepare temp file for obj 28 installUpdObjRest[679]-Step 5:No need to back /etc/geoip_db.gz installUpdObjRest[684]-Step 6:Copy new object /tmp/upd5DQ7fR->/etc/geoip_db.gz installUpdObjRest[731]-Failed to copy new obj file /tmp/upd5DQ7fR to /etc/geoip_db.gz, errno=28, No space left on device ---> upd_install_pkg[1361]-AVEN030 is up-to-date upd_install_pkg[1361]-AVDB002 is up-to-date upd_install_pkg[1361]-AVDB007 is up-to-date upd_install_pkg[1361]-IBDB001 is up-to-date upd_install_pkg[1387]-FCNI000 installed successfully upd_install_pkg[1387]-FDNI000 installed successfully upd_install_pkg[1387]-FSCI000 installed successfully upd_install_pkg[1361]-FLEN075 is up-to-date Solution: Flash-format the device then re-load the image file same version and upload the config backup. Also, make sure while doing this activity to try to connect the console cable to the device and perform the activity. Technical Tip: FortiGate Flash Format process Technical Tip: Formatting and loading FortiGate firmware image using TFTP Useful commands: di de reset diagnose debug application update -1 diagnose debug enable  To verify the status after deleting IP Geography database: diagnose autoupdate version To verify the status after updating the IP Geography database: dia autoupdate versions | grep -f -A6 "IP Geography DB" Note: This issue happens on the lower-end device that has 2 GB RAM.