FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
saleha
Staff
Staff
Article Id 366372
Description This article discusses the issue with symptoms of FortiOS experiencing signs of kernel level errors such as commands or GUI options that used to work but produce errors.
Scope FortiGate.
Solution
  •  A Linux-based kernel level or file system level error can stem from different reasons such as power outage, failed firmware upgrade, improper deletion of or modification of file system, running into a known issue, etc.
  • One example of such an issue can be installing a new certificate or attempting to create a CSR request from FortiOS can produce errors such as: 'incorrect certificate file format CA/LOCAL/CRL/REMOTE.cert.' or 'failed to generate certificate signing request'.

 

  • The following command will print out crashlog events:

diagnose debug crashlog read

 

  • The result indicates a kernel-level error:

 

EXT3-fs (nvme0n1p1): error: ext3_remount: Abort forced by user

 

 

  • Depending on the result of the investigation next step can vary:

Blank board (2).png

 

 

 If applicable or requested by TAC support:

  • As mentioned on the algorithm chart above, it is recommended when contacting Fortinet TAC to collect required logs and config files.