FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
anikolov
Staff
Staff
Article Id 424508
Description This article describes how to troubleshoot, confirm, and resolve an issue where '/data2/madb.dat file size not match' log appears after a bootup sequence, and reaffirm that it is not a RMA issue. 
Scope FortiGate.
Solution

To confirm the issue, take the output of 'diagnose autoupdate versions'. The output should look like the following:

 

Mac Address Database
---------
Version: 1.00143
Contract Expiry Date: n/a
Last Updated using manual update on Tue Dec 6 09:00:00 2022
Last Update Attempt: Fri Nov 28 10:40:56 2025
Result: Connectivity failure <----- Potential FortiGuard connectivity issue.

 

The second output that should be collected is 'diagnose debug config-error-log read'. The output should result in the following:

 

diagnose debug config-error-log read
init_vendor_mac: ret=-8 (madb file format error)

 

For a potential solution of the issue, the command 'execute update-now' should be done to trigger an update. However, as the output points out to a potential FortiGuard issue, the steps in the KB article from below should be taken to resolve the issue: Technical Tip: Verifying and troubleshooting FortiGuard updates status and versions.

 

Sometimes, the FortiGate is in an air-gapped environment and has no internet connectivity. In order to resolve this issue in such a case, open a ticket with TAC and request the latest Mac Address Database. After the installation package is received, the package should be installed. An example with the use of an FTP server is provided below:

 

execute restore other-objects ftp madb_fos72_00001.00300.pkg <server-ip>:<port> <username> <password>

 

Upon installation of the package, it is expected that the message will disappear and the issue is solved.