FortiSOAR Discussions
khalilbouzaiene1
Contributor

Issue Installing FortiGate Connector on FortiSOAR – Repository/Connectivity Error

 

 

I am currently working on integrating FortiGate with FortiSOAR and facing an issue while installing the FortiGate connector.

  • FortiSOAR Version: [7.6.2]

  • FortiGate Version: [7.0.0]

  • Environment: VM (CentOS/RHEL base

When I try to install the FortiGate connector using the following command:

 

sudo yum install cyops-connector-Fortinet-FortiGate

 

 

I get the following error:

Errors during downloading metadata for repository 'fsr-app':
- Curl error (28): Timeout was reached for https://repo.fortisoar.fortinet.com/7.6.2/fortisoar/x86_64/repodata/repomd.xml [Connection timed out after 30000 milliseconds]
Error: Failed to download metadata for repo 'fsr-app': Cannot download repomd.xml

 

I have already tried the following:

  1. Verified network connectivity (ping to 8.8.8.8 and 1.1.1.1 works).

  2. Edited /opt/cyops-integrations/.env/pip.conf to point index-url to https://repo.fortisoar.fortinet.com/connectors/deps/simple/.

  3. Increased timeout and retries in pip.conf.

  4. Still facing the same issue — connector installation fails with repo connection timeout.

Could you please advise if:

  • There is a known issue with the repository repo.fortisoar.fortinet.com?

  • Or if there is an alternate method (manual connector package installation or offline method) to install the FortiGate connector?

Thank you in advance for your support.

Best regards,

 

1 Solution
tkanade

  • Do following
    • Download rpm from browser using URL on PC - https://repo.fortisoar.fortinet.com/connectors/x86_64/cyops-connector-fortigate-firewall-5.4.0-10112...
    • This is latest version of fortigate firewall connector
    • Copy this RPM package from location you downloaded to FortiSOAR system  using 'scp' linux command or using winscp application  (incase you downloaded file on a windows system). You can search on google for  steps to copy  a file to a linux system with detail steps
    • Once file is copied to FortiSOAR system , ssh to system and execute commands I shared earlier. 

View solution in original post

14 REPLIES 14
tkanade
Staff
Staff

hi, repo is online and working as expected. Do you have proxy set up? 
can you execute command -

curl -v https://repo.fortisoar.fortinet.com/7.6.2/fortisoar/x86_64/repodata/repomd.xml and share output ? 

khalilbouzaiene1

hi there 
thank you for  your responce 
yeah i see that the repo is online , but when i try to ping it ( ping repo.fortisoar.fortinet.com) i got nothing  but when i try to put that address in the browser  i get multiple repositoty 
and for the curl command  also i got nothing  i get this  : 

 

 

i have connectivity on my vm 

tkanade

Image  shows connection time out and can see that there is no proxy.  IP its showed is also correct one.  
I can access same URL. Is there anything like firewall blocking access? 
Also can you share from which location are you located , just for information, if possible ? 

khalilbouzaiene1

no there is no any firewall blocking access , i have tried to ping the repo.fortisoar.fortinet.com from my pc and from an other source of connection to avoid passing throw my firewall , but  i  got no thing also , no reply 
and  i'm located  in north africa specificly in Tunisia . 

 

tkanade

Can you share your laptop IP or PC . please check it using https://whatismyipaddress.com/ and share it over email to me tkanade@fortinet.com. Let me check if your request is reaching to repo server or not 

khalilbouzaiene1

i have send you an email 

tkanade

Thank you. I checked access logs but I see no request made from IP you shared. Traffic is not reaching repo server.  I can see other traffic / requests being made

khalilbouzaiene1

i have send you second email with other ip ! 
and so what might be the problem !!

i don't know but i don't change any thing in fortisoar vm and like what i said to you the repo cannot be reached from the fortisoar vm even from my own pc 

is there any geoloacation restriction !?

tkanade

I check both IP address. No there is no blocking of any kind. Https traffic is allowed from all locations