Hi,
I am trying to eval FortiSOAR. I see in the documentation that upon deployment, you can activate the trial license after deploying the platform by logging into your FortiCare account.
I did this and it said there was an error saying it couldn't sync with FDN.
I logged into support.fortinet.com and could then see that the platform had been registered in my account (previously I didn't have any assets in my list), and that there was a license file.
So instead of trying to login to my account to activate the trial, I downloaded the license file and uploaded from the same screen within FortiSOAR. This is a valid license file for 3 users and it doesn't expire (well not until 2122 anyway), but the same error about not being able to sync with FDN appeared.
I can resolve and ping https://globalupdate.fortinet.net from the FortiSOAR server.
Anyone else seen this issue before or know what else I can check? I'm stuck in a chicken and the egg situation whereby I want to eval first before committing to any spend, but I can't deploy to eval and because I don't have a support contract, I can't get TAC help with it.
Cheers
Solved! Go to Solution.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hi tkanade,
Thanks very much for your response. Unfortunately this didn't help me. I had already tried restarting the crops service and I deployed the server nearly a week ago.
I thought I would do some more troubleshooting. In the documentation, there is a troubleshooting step that says to check specific logs (https://docs.fortinet.com/document/fortisoar/7.3.0/deployment-guide/223944/licensing-fortisoar#Troub...). These log files were empty for me.
So I ran a packet capture while trying to install the license from the GUI and I couldn't see any traffic from the server to Fortinet or Fortiguard. This confirmed my suspicion that the SOAR server wasn't even calling back to Fortinet.
I then tried deploying the license from the CLI with "csadm license --deploy-enterprise-license FSRVMPTM********.lic". This displayed a new error:
=========================================================================
License deployment may take few minutes, please do not stop the process..
=========================================================================
=========================================================================
Validating license before deployment..
=========================================================================
Exception in thread "main" java.lang.UnsupportedClassVersionError: com/fortinet/api/fcp/FCPClient has been compiled by a more recent version of the Java Runtime (class file version 55.0), this version of the Java Runtime only recognizes class file versions up to 52.0
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClass(ClassLoader.java:756)
at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:473)
at java.net.URLClassLoader.access$100(URLClassLoader.java:74)
at java.net.URLClassLoader$1.run(URLClassLoader.java:369)
at java.net.URLClassLoader$1.run(URLClassLoader.java:363)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:362)
at java.lang.ClassLoader.loadClass(ClassLoader.java:418)
at java.lang.ClassLoader.loadClass(ClassLoader.java:351)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:348)
at org.eclipse.jdt.internal.jarinjarloader.JarRsrcLoader.main(JarRsrcLoader.java:59)
Traceback (most recent call last):
File "/opt/cyops-auth/utilities/licensemanager.py", line 262, in deploy_license
is_valid, message, contracts = validate_license_before_deployment(nodeId, license_key, is_distributed)
File "/opt/cyops-auth/utilities/licensemanager.py", line 239, in validate_license_before_deployment
is_valid, message, contracts = validate_license_fdn_part(node_id, license_key)
File "handlerworkers/fdnclient.py", line 94, in handlerworkers.fdnclient.validate_license_fdn_part
File "handlerworkers/fdnclient.py", line 152, in handlerworkers.fdnclient.get_license_details_from_fdn
Exception: Failed to sync with FDN
License deployment failed with error: Failed to sync with FDN
I searched for the following line in Google "Exception in thread "main" java.lang.UnsupportedClassVersionError: com/fortinet/api/fcp/FCPClient has been compiled by a more recent version of the Java Runtime (class file version 55.0), this version of the Java Runtime only recognizes class file versions up to 52.0" and it returned 1 hit for another Fortinet community webpage.
This error is due to the Java version being run and this post contains the steps to resolve the issue.
Thanks again for trying to help me, I have found the resolution to my error. Hopefully this will help anyone who experiences the same issue as me in the future.
Cheers
Rob
Hi ,
Once Forticare is updated with new entitlement , it may take 30 minutes or bit for for FDN servers to sync with Forticare data .
You can attempt one thing , restart FortiSOAR service which calls sync command -- systemctl restart cyops-auth from terminal access ( bash shell)
Hi tkanade,
Thanks very much for your response. Unfortunately this didn't help me. I had already tried restarting the crops service and I deployed the server nearly a week ago.
I thought I would do some more troubleshooting. In the documentation, there is a troubleshooting step that says to check specific logs (https://docs.fortinet.com/document/fortisoar/7.3.0/deployment-guide/223944/licensing-fortisoar#Troub...). These log files were empty for me.
So I ran a packet capture while trying to install the license from the GUI and I couldn't see any traffic from the server to Fortinet or Fortiguard. This confirmed my suspicion that the SOAR server wasn't even calling back to Fortinet.
I then tried deploying the license from the CLI with "csadm license --deploy-enterprise-license FSRVMPTM********.lic". This displayed a new error:
=========================================================================
License deployment may take few minutes, please do not stop the process..
=========================================================================
=========================================================================
Validating license before deployment..
=========================================================================
Exception in thread "main" java.lang.UnsupportedClassVersionError: com/fortinet/api/fcp/FCPClient has been compiled by a more recent version of the Java Runtime (class file version 55.0), this version of the Java Runtime only recognizes class file versions up to 52.0
at java.lang.ClassLoader.defineClass1(Native Method)
at java.lang.ClassLoader.defineClass(ClassLoader.java:756)
at java.security.SecureClassLoader.defineClass(SecureClassLoader.java:142)
at java.net.URLClassLoader.defineClass(URLClassLoader.java:473)
at java.net.URLClassLoader.access$100(URLClassLoader.java:74)
at java.net.URLClassLoader$1.run(URLClassLoader.java:369)
at java.net.URLClassLoader$1.run(URLClassLoader.java:363)
at java.security.AccessController.doPrivileged(Native Method)
at java.net.URLClassLoader.findClass(URLClassLoader.java:362)
at java.lang.ClassLoader.loadClass(ClassLoader.java:418)
at java.lang.ClassLoader.loadClass(ClassLoader.java:351)
at java.lang.Class.forName0(Native Method)
at java.lang.Class.forName(Class.java:348)
at org.eclipse.jdt.internal.jarinjarloader.JarRsrcLoader.main(JarRsrcLoader.java:59)
Traceback (most recent call last):
File "/opt/cyops-auth/utilities/licensemanager.py", line 262, in deploy_license
is_valid, message, contracts = validate_license_before_deployment(nodeId, license_key, is_distributed)
File "/opt/cyops-auth/utilities/licensemanager.py", line 239, in validate_license_before_deployment
is_valid, message, contracts = validate_license_fdn_part(node_id, license_key)
File "handlerworkers/fdnclient.py", line 94, in handlerworkers.fdnclient.validate_license_fdn_part
File "handlerworkers/fdnclient.py", line 152, in handlerworkers.fdnclient.get_license_details_from_fdn
Exception: Failed to sync with FDN
License deployment failed with error: Failed to sync with FDN
I searched for the following line in Google "Exception in thread "main" java.lang.UnsupportedClassVersionError: com/fortinet/api/fcp/FCPClient has been compiled by a more recent version of the Java Runtime (class file version 55.0), this version of the Java Runtime only recognizes class file versions up to 52.0" and it returned 1 hit for another Fortinet community webpage.
This error is due to the Java version being run and this post contains the steps to resolve the issue.
Thanks again for trying to help me, I have found the resolution to my error. Hopefully this will help anyone who experiences the same issue as me in the future.
Cheers
Rob
Hello Rob,
Just to confirm , by changing java version , license was deployed and FDN sync completed, am I correct ?
let me know if you need any more assistance , we are more than happy to assists you.
Yes, that is correct
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.