- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Couldn't access management | root cause
Hi guys,
Recently the management was inaccessible but it could be pinged. After a reboot the device was accessible again and all was well.
Is there anything I could run/see that could help me identify what happened around the time of the incident?
Regards
Miata
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Depending on Firmware version:
from cli
diag debug crashlog read
might help you pinpoint something.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Are you not able to manage the firewall by the GUI? Have you tried to use Fortiexplorer, or just trying to SSH into a putty session with it? If you can SSH to it, run a sniff to make sure your management traffic is getting to the firewall. Run a flow to determine what is blocking the traffic.
Let us know how it works out.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The cli diag debug flow command is your 1st step. Since ping works I would check allowaccess on the interface(s) and run a diag debug flow and with a sniffer on the interface(s) in question
e.g ( ssh and https on wellknown ports for wan1 interface and local address 1.1.1.1 )
diag sniffer packet wan1 "host 1.1.1.1 and port 22 or 443"
PCNSE
NSE
StrongSwan
