Cannot Upgrade FortiAnalyzer

[Miata]

We have tried to update the server several times now using 3 different update files, however, we always get the same error: Connect to tftp server 10.27.3.183 ... ######################################################## Failed to download the image from tftp server 10.27.3.183. File is not an update file. The only thing I can think of is that there is not enough free disk space to perform the upgrade, as my colleague Hugh pointed out previously. We tried to delete the SQL database, but it fails because the process is still running. When we try to stop the SQL process we get an error telling us there is not enough free space to perform the operation. Could you please advise how we proceed?

Thanks

Jack

[Miata]

Ok so I've just realised there are no images to download for the FortiAnalyzer 1000B if you want to upgrade to V5.0 and above.

Can you not upgrade this device?

[hzhao_FTNT]

What's your current version? The latest release build for FAZ1000B is 5.0.10.

[Miata]

I've just realised that 5.0.10 is the latest firmware for the 1000B. Whoops.

Also, this upgrade is to fix a memory leak that occurs 4 MR3 Patch 8. Will upgrading to 5.0.10 solve this? I assumed it would in 5.2, but there isn't a firmware image for 5.2.

Thanks

[hzhao_FTNT]

Please address your memory leak issue. Do you have a bug number for it?

I saw some fixes for sqllogd/oftpd/fgfmd memory leak in 5.0.x.

[Miata]

Essentially, this is the issue:

We are having a problem web browsing to the FortiAnalyzer. We are getting the error message “Warning: this page requires Javascript. To correctly view, please enable it in your browser.” We have tried rebooting it as some people have mentioned on the forums – but the message remains. Also – when we try to disable SQL using the command line – we get the following error message (sql)$ set status disable (sql)$ end Write to file /drive0/private/remotedb_A2NdlY error: No space left on device Cannot write rdb to file. Discard the setting. File Error. FortiAnalyzer-1 $ FortiAnalyzer-1 $ get system status Version: FortiAnalyzer-1000B v4.0,build0719,131126 (MR3 Patch 8) Branch point: 719 Release Version Information: MR3 Patch 8 Serial-Number: FL-1KB3R09000343 BIOS version: 00010010 VCM Plugin Version: 1.217 Admin Domain Status: disabled Max number of administrative domains: 50 Registered Devices: 32 Maximum Supported Devices: 2000 Hostname: FortiAnalyzer-1 FIPS mode: disabled System Time: Thu Mar 19 12:22:10 GMT 2015 Disk Usage: Free 0.00GB, Total 916.89GB RAID information: RAID level: RAID1 RAID state: OK RAID controller: Linux MD RAID Number of disks: 1 Array capacity: 931.51GB Disk State Size disk01 OK 931.51GB disk02 NotPresent

FortiAnalyzer-1 $ diag sys top 2 Run Time: 4 days, 0 hours and 31 minutes 0U, 0N, 7S, 17I; 2006T, 1661F, 0KF fortilogd 152 S 31.8 3.5 [kjournald] 94 DW 3.9 0.0 [md0_raid1] 89 RW 2.9 0.0 [kworker/2:1] 29 SW 0.9 0.0 cmdbsvr 107 S 0.0 1.0 alertmail 163 S 0.0 0.8 httpd 149 S 0.0 0.7 httpd 214 S 0.0 0.5 httpd 21972 S 0.0 0.5 httpd 7847 S 0.0 0.5 httpd 21963 S 0.0 0.5 httpd 22031 S 0.0 0.5 sqlrptcached 158 S 0.0 0.5 httpd 211 S 0.0 0.5 oftpd 217 S 0.0 0.4 fawsd 218 S 0.0 0.3 fgfmd 147 S 0.0 0.3 cli 24202 S 0.0 0.3 alertd 164 S 0.0 0.3 init 1 S 0.0 0.3

Thanks

[hzhao_FTNT]

1. FAZ 5.0.10 has been tested compatible with FireFox32/Chrome37/IE11.

2. sql can be disabled under collector mode only.

[Miata]

Thank you for your reply.

So you believe that a browser, that is not compatible with the FAZ, could be causing this issue?

[hzhao_FTNT]

You are welcome. From the error msg, it looks like JS has been blocked by your browser.