FortiWeb
A FortiWeb can be configured to join a Security Fabric through the root or downstream FortiGate.
jcastellanos
Staff
Staff
Article Id 419398
Description This article describes how to identify network connectivity issues with FortiSandbox Cloud after activating the license.
Scope FortiWeb v7.4.x.
Solution

The administrator has an active license to integrate FortiWeb with FortiSandbox Cloud, but the status shows as 'disconnected'.

 

1-status.png

 

An administrator can run a debug to analyze connectivity issues.


diagnose debug timestamp enable
diagnose debug application fortisandbox 7
diagnose debug enable

 

The output of the debug could indicate there is a connectivity issue.

 

[FSA][INFO](fsa_oftp.c:684): ============= BUILD CONNECTION ==============
[FSA][INFO](fsa_oftp.c:714): FortiSandbox IP: 208.91.113.207
[FSA][ERR](fsa_oftp.c:763): [115: Operation now in progress] fail to connect to server


The administrator has to review the FortiWeb IP address has full access to the next destination:

 

FortiSandbox DOMAIN : apt1.forticloud.com
FortiSandbox IP : 208.91.113.207
FortiSandbox port : 514

 

If the diagnosis debug shows different results than above, open a ticket with Fortinet TAC and share all output results. Technical Tip: How to create a ticket for Fortinet TAC  

 

Related document:
system fortisandbox - FortiWeb CLI reference

forticloud-sandbox - FortiWeb CLI reference 

Related article:
Technical Tip: FortiSandbox Cloud shows connection status as Unreachable or not authorized