FortiAnalyzer 6.0.3 Build 255

[andrewbailey]

Hello,

I've recently upgrade FortiAnalyzer on AWS to 6.0.3 Build 255. I'm using the On-Demand "free" licence with a limit of 2 ADOMS.

The security fabric (small as it is) consists of a FortiClientEMS (running 6.0.3 Build 134), a Fortigate 60E (running 6.0.3 Build 200) and a realtively small number of clients (only 4 windows devices using FortiClient 6.0.3 Build 155).

Following the upgrade of FAZ logging has stopped. FAZ is reporting this message:-

Unable to accept logs from Device (FGT60E4QXXXXX091 XXX.XXX.XXX.37) due to exceeded license count, errcode=-7450.

FAZ is showing two ADOMS from the Fortigate root and fcm_root.

If I try and delete either (or the Fortigate itself) from the GUI I get a "Response Format Error".

Anyone got any suggestions or ideas about what I'm doing wrong?

Thanks,

Andy.