FGT Firewall 40F- upgrade issue with 7.4.7

[anettaj77]

I did an upgrade on my firewall and now I cannot login.  Also did a reset and cannot connect to the default  IP.  Anyone experienced this ? 

[AEK]

Did you try connect with a console cable?

[anettaj77]

Yes

[kaman]

Hi anettaj77,

Please connect to FortiGate via SSH through PuTTY as demonstrated below, ensuring that SSH is enabled on the port.

If SSH access is unsuccessful, then use the following article to access the FortiGate via console cable and move on to next steps:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-connect-to-the-FortiGate-and-FortiA...

After taking the access, run the httpsd debug logs and check what output you are getting:

diagnose debug application httpsd -1
diagnose debug enable

Try to run the below commands and see if you were able to access or not.

config sys global
set admin-server-cert Fortinet_Factory
end

Please follow the below steps and see after that you were able to take the GUI access or not.

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Cannot-access-the-FortiGate-web-admi....

If you have found a solution, please like and accept it to make it easily accessible to others.

Regards,
Aman

[anettaj77]

Thanks so much.  I got a little way with your suggestion.  I still can't SSH or get to the guy

[dingjerry_FTNT]

Hi @anettaj77 ,

Please provide more details:

1) What is your user account in this issue?  Local or remote?

2) Do you still have access to the FGT via console?

3) What interface IP did you try to access for the GUI?  Please share this interface settings.

4) What is your client IP to access this FGT?  And please share the settings of the user account you were using while having this issue.

[anettaj77]

1. Local

2. Yes, but only through serial not SSH

3. The default.  I can't get in to share the settings.

4. Client is dhcp and I tried to hard set it. 

Did a diag and got the following 

[dingjerry_FTNT]

Hi @anettaj77 ,

It's not the time to debug httpsd for now.

So what you need to do:

1) Login to the console;

2) Run the following CLI commands:

show system interface  (Please provide the interface which you are accessing only, no need to provide all of the outputs)

show sys admin

get router info routing-table all

[anettaj77]

here is 

[anettaj77]

here is