After upgrading the firmware, I am unable to access to Fortigate using the UI (https)

[Jacky1]

I have two FortiGates configured in HA (FW1 and FW2). After upgrading the firmware to v7.6.2 build 3462 (Feature) and rebooting, I am unable to access the UI via HTTPS on (FW2), although I can access (FW1) after rebooting again.

[kaman]

Hi Jacky1,

It is possible to have access to the Secondary device's GUI/HTTPS by configuring a management interface under HA settings or configuring a management IP under the system interface

Connect to the slave FortiGate, proceed with the following command in the CLI:

execute ha manage <HA cluster index of the secondary unit> <username> <password>

And run the sniffer and debug logs and see the output result.

di de flow filter addr <src-address>
di de flow filter port 443
diag debug flow trace start 1000
diag debug en

Please refer to the below document for more information:

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Unable-to-access-secondary-unit-GUI-...

Regards,
Aman

[dingjerry_FTNT]

Hi @Jacky1 ,

If you have no HA management interface configured, you can only access the current Primary Device in GUI.

Please share your HA settings.

[Jacky1]

Thank you for your assistance.  I have two devices in the HA group, but I am currently able to access the GUI on only one device.  Unfortunately, I am unable to access the GUI on the other device after rebooting it.

[dingjerry_FTNT]

Hi @Jacky1 ,

1) Were you able to access the Secondary device in GUI before?

2) Please share the HA settings with this command:

show sys ha

[Jacky1]

1) Yes, I was able to access the secondary and primary device in the GUI before, but now I am unable to do so after the latest firmware update.

2) NAMI-FW2 # show sys ha
config system ha
set group-name "NAMI-FW"
set mode a-p
set password ----
set hbdev "port15" 0 "port16" 0
set ha-mgmt-status enable
config ha-mgmt-interfaces
edit 1
set interface "mgmt"
next
end
set override disable
set priority 100
set monitor "port1" "port2" "port3"
end