Fortinet Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
EricG1793
New Contributor

Potential issue? GUI issue in 5.0.12

Hello everyone,

 

Today I noticed a couple strange things with the GUI of our 600C running 5.0.12. Take a gander. First of all, all of the interfaces are showing links, which isn't true. The only one that's not green is disabled administratively.

 

Also, it's only showing a few instances of extremely high (as in 2.67 Gbps up and down on a 1 Gbps link) usage in the WAN connection graph. And two of the internal interfaces are showing 5.33 Gbps up and down. I know that FortiOS 5.4 is/was having GUI issues, what about 5.0.12?

 

Uptime is 41 days. Not sure exactly when this started; it's been a while since I've logged in the FortiGate.

 

Is this something I should be concerned about and reboot the unit?

 

EDIT: Forum's only allowing me one attachment, sorry about that.

2 REPLIES 2
ede_pfau
Esteemed Contributor III

Now, you're lucky.

 

I've had similar problems with a 600C running 5.0.9 for more than a year. After around 100 days port status 'disappeared' from the 'Unit Operation' widget, traffic history widgets were showing the exact same levels on all ports (which couldn't be true). CPU load was 100 % (in the GUI only!). Apart from these cosmetics no functions were compromised. A reboot "solved" the problem for another 60 to 100 days.

Without reboot the 600C would eventually freeze completely - no way to reboot except for a power-cycle, with partial loss of the configuration. Not good.

 

Other fellow forum members were experiencing the same: https://forum.fortinet.com/tm.aspx?m=122740

 

It turned out that there is an incompatibility of the BIOS or firmware with the memory modules on a 600C. Only the 600C is affected. A BIOS upgrade will not help much (it will only allow for a warm reboot instead of a cold one) but a special build of v5.0.12 will.

 

Finally, we installed special build 8408 and haven't had any problems since (uptime: 173 days). The bugIDs involved were 0229553 (NP4 failing to get the switch) and 218033 (new switch SDK), and apparently, 0243461 as well (see post mentioned above).

 

Finally, in v5.2 Fortinet has incorporated the fix:

in v5.2.4: "for FG-600C, PC: 08908-08 and later, memory incompatibility, fixed in v5.2.2 and later"

but there's no direct reference to the 'switch' problem.

 

Our FG-600C is PN 08908-02, so older than that, so it's probably not affected by the memory bug but the switch bug.

 

I'd open a Support call with FTNT and refer them to our case (sorry, no caseID av. at the moment), or the special build of v5.0.12. That should solve your problem within half a day.


Ede

"Kernel panic: Aiee, killing interrupt handler!"
EricG1793

I RMA'd the unit with the BIOS issue and we got a later revision refurbished unit in place. I'll contact them about the special 5.0.12 version. Hopefully 5.4 will be usable before 5.0 support ends.