FortiManager
FortiManager supports network operations use cases for centralized management, best practices compliance, and workflow automation to provide better protection against breaches.
cwaffokahouo
Staff
Staff
Article Id 411995
Description

This article describes how to resolve the FortiManager display issue that shows the FGSP status as Disabled even though the FGSP configuration is done correctly and is functional.

 

FGSP - Disabled.png

Scope FortiManager v7.2, FortiGate.
Solution

The fix steps are:

  1. Delete the FGSP peers on the FortiGate unit that do not have the correct status on FortiManager under the FGSP column:

 

config global (if multi-vdom is enabled)

    config system standalone-cluster

        config cluster-peer

        delete @Peer_id <-- Replace the variable @Peer_id with the real peer ID, and repeat for all peers.

end

 

Note:

  • If the auto-update is not enabled on FortiManager, retrieve the FortiGate configuration on FortiManager before running the next step.
  • Deleting Peer ID will break the FGSP cluster and affect the production traffic.

 

  1. Recreate the FGSP peer previously deleted:

 

 

config global (if multi-vdom is enabled)

    config system standalone-cluster

        config cluster-peer

            edit 1

                set peerip x.x.x.x

                set syncvd "@vdom_name"

        end

end

 

After completing the above steps, the FGSP status should change to Enabled (if auto-update is not enabled on FortiManager, retrieve the FortiGate configuration on FortiManager).

 

FGSP - Enabled.png

 

Note:

To avoid this issue, enable and configure FGSP after adding FortiGate to FortiManager.