Description | This article describes causes and fixes for an issue where FortiManager does not provide FortiGuard service to hidden devices and they are not counted in the device/ADOM license. |
Scope | FortiManager 6.2 and higher versions. |
Solution |
If a device is hidden, it is not used in a device license count and FortiManager does not provide FortiGuard services to that device:
FortiGate:
get_fcpr_response[298]-Unpacked obj: Protocol=3.2|Firmware=FMG-VM64-FW-7.02-1460|SerialNumber=FMG-VMTMXXXXXX|Response=401| upd_fds_fmg_info_update[1667]-Updated FMG [FMG-VMTMXXXXXX], ver=7.2-1460, code=401 upd_pkg_verify_update_rsp[1187]-Unexpected update rsp code 401 __upd_act_update[308]-Received invalid update rsp
FortiManager:
__check_unreg_device: device FG101FXXXXXXXXX is hidden, skip update __process_client_request,2980; check unreg failed for FG101FXXXXXXXXX [FMG-->FGT] Response: Protocol=3.2|Firmware=FMG-VM64-FW-7.02-1460|SerialNumber=FMG-VMTMXXXXXX|Response=401|
If the device is not hidden but is unregistered, it is counted in a device license count and FortiManager provides the FortiGuard service to that device:
FortiGate:
upd_fds_fmg_info_update[1793]-Updated FMG [FMG-VMTMXXXXXX], ver=7.2-1530, code=300
FortiManager:
[FMG-->FGT] Response: Protocol=3.2|Firmware=FMG-VM64-FW-7.02-1530|SerialNumber=FMG-VMTMXXXXXX|Response=300|
To allow FortiGuard services for unregistered devices (not hidden devices), it is necessary to have a sufficient FortiManager device/domain license. |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.