FortiManager supports network operations use cases for centralized management, best practices compliance, and workflow automation to provide better protection against breaches.
This article describes possible reasons and solutions for connectivity issues with FortiManager Cloud.
Scope
FortiGate, FortiOS v6.2 or later.
Solution
The first thing that needs to be checked is the internet connectivity, make sure the device has an internet connection.
After that check whether the DNS servers are reachable or not, if reachable then check which protocol is it using i.e., DOT or Cleartext.
If it is using DOT, try changing it to DOT using the following commands:
config system dns
set protocol dot
end
Check the FortiGuard connectivity if it is showing up or down.
If there is an SD-WAN configuration in place, make sure the performance SLA for that particular interface shows as UP.
If the performance SLA is down for that interface, try specifying the interface manually in the FortiGate central-management configuration with the below commands:
config system central-management
set interface-select-method specify
set interface wan1
end
In the example, interface wan1 is used. It is also possible to use set interface-select-method sdwan.
After that, try specifying the interface in DNS settings and FortiGuard settings using the following commands:
config system dns
set interface-select-method specify
set interface wan1
end
config system fortiguard
set interface-select-method specify
set interface wan1
end
Once the connectivity is confirmed, run the below debug command as it will give further information on why connectivity to FortiManager Cloud is failing/unreachable:
If the above debug commands shows the error in regards to device not having valid license run the below command to confirm the license associated with the device. Under account contract section there should be a license for FortiManager Cloud:
diagnose test update info
FortiManager cloud requires entitlement for each device to be connected. More information for entitlement requirement can be found in this section of the documentation.
Once the entitlement is applied correctly to the device, the connectivity to FortiManager Cloud can be confirmed by running the following command:
