Can't login to Fortigate GUI while SSH works

[bcieszewski]

Hi, 

I'm running  FortiGate-VM64 v7.4.3,build2573,240201 (GA.F) on eval license:

License Status: Valid
License Expiration Date: 2024-05-06

Since I installed the eval license GUI admin access stopped working. After one login attempt (with proper credentials) I instantly get "Too many login failures. Please try again in few minutes".

If I refresh the page, the login form is locked with the error "Too many bad login attempts or reached max number of logins. Please try again in a few minutes"

I tried to change  admin-lockout-duration to 5, but the lockout did not disappear

The current global config and admin config looks like this:

config system global
set admin-https-redirect disable
set admin-sport redacted
set admintimeout 60
set alias "redacted"
set gui-auto-upgrade-setup-warning disable
set gui-local-out enable
set hostname "redacted"
set sslvpn-web-mode enable
set timezone "US/Pacific"
end


config system admin
edit "adm_marcin"
set accprofile "super_admin"
set vdom "root"
set password ENC redacted
next
edit "adm_bartek"
set accprofile "super_admin"
set vdom "root"
set password ENC redacted
next
end

 

[ozkanaltas]

Hello @bcieszewski ,

You can wait 5 min (default admin lockout time) or you can access from another IP address to Fortigate. 

Fortigate just keeps the IP address of the trying user. If you change your IP address you can try to login again.

About changing admin lockout time, Your workaround not working because Fortigate already banned your IP address according to your old lockout time setting. 

[AEK]

Hi

Change the IP of your PC and try again.

[jera]

Hi @bcieszewski, 

If changing of IP didn't work, you can go through these troubleshooting steps:

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Cannot-access-the-FortiGate-web-admi...