FortiManager
FortiManager supports network operations use cases for centralized management, best practices compliance, and workflow automation to provide better protection against breaches.
axel_gonzalez_FTNT
Article Id 204239

Description

 

This article describes that when a TCL Script is running in FortiManager, it is possible to see that it will not install it due to errors like 'running tcl script failed. Reason: Run script fail'.

 

Follow the recommendations below.

 

Solution

 

Make sure the FortiGate has an updated and valid user/password under 'Device Manager' of the FortiManager.

 

axel_gonzalez_FTNT_3-1643923899955.png

 

Try to login using CLI Widget using System Information under 'Device manager' of the FortiManager.

 

axel_gonzalez_FTNT_1-1643923428048.png

 

Make sure to have connectivity with the user and consider that if the user have Trusted host enable it is necessary to add network segment 169.254.0.0/24.

 

axel_gonzalez_FTNT_2-1643923584330.png

 

Once is validated user/password and connectivity are good.

It is necessary to know all TCL scripts may fail due to an invalid command you are using.

 

It is possible to get more details in FortiGate by running the following command.

Share output with TAC support if there are any reasons why is failing.

 

# diagnose debug cli 8

# diagnose debug enable

 

Related document.

https://docs.fortinet.com/document/fortimanager/7.0.3/administration-guide/914165/tcl-scripts

Technical Tip: How to troubleshoot TCL Scripts failed in FortiManager