Troubleshooting Tip: Unable to access FortiGate VM via GUI, stuck in 'FortiGate VM License' authentication screen

[fortega]

Description

When trying to connect via the GUI to the FortiGate VM it is possible to receive the following message and the GUI cannot be accessed.

This will occur if the FortiGate VM cannot connect to the FortiGuard servers to register the license.

Scope

FortiGate VM.

Solution

Try to access via SSH to the FortiGate VM and review the connectivity with FortiGuard servers.

Useful debug:

diagnose debug reset
diagnose debug application update -1
diagnose debug enable
execute update-now

If the result is similar to the following, review with the ISP to assure that the respective port (443 here) is not blocked:

upd_act_setup_with_action[190]-Trying FDS 173.243.138.68:443
tcp_connect_fds[231]-select() timed out
upd_comm_connect_fds[423]-Failed TCP connect

Once the FortiGate VM connects successfully to the FortiGuard servers, access will again be allowed to the GUI management.

An alternative test for troubleshooting the path is to use the built-in telnet command:

execute telnet 173.243.138.68 443