Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Kpax
New Contributor

FortiGate 60C: No Disk Available?

greetings,

 

Issue:

System logs transfer to Memory/Flash instead to Disk

 

Info:

2 x FGT60C units, running FortiOS 4.0.0 and 5.2.3

 

 

 

shell outcome (for the unit who logs to Memory):

 

shell outcome (for the unit who logs to Disk):

 

 I will happy to get any direction.

 

 

regards,

Kpax

 

Thanks in advance,

Kpax

Thanks in advance, Kpax
5 REPLIES 5
ede_pfau
SuperUser
SuperUser

Logging to the flash disk has been disabled in newer firmware releases. Flash will not survive intensive write activity for long, and RMA cases were piling up at Fortinet, especially the small desktop models (-80C).

You can try to enable it in the CLI (conf log disk - set status enable - end) but that might be disabled as well, at least in v5.2.3.

Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
Dave_Hall
Honored Contributor

I think around 4.3 MR3 patch 11 time frame, Fortinet started disabling disk logging on those smaller units (200B and lower).  As Ede indicated you can "re-enable" disk logging via the CLI, but I strongly advise against this (myself having to RMA about 10 200Bs in the last 2.5 years due to "bad" flash) .  On 5.0/5.2 I believe Fortinet completed removed flash storage altogether on some of those low-ends (doesn't even show up when you perform a get hardware status from the CLI).

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C

NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
ede_pfau
SuperUser
SuperUser

Funny, I thought a 200B was more than a "smaller model"...but for logging, the removable harddisk option was offered.

Newer midrange models of the "D" series feature a built-in SSD which shouldn't have any problems with logging.

 

IMHO part of the problem is the half-baked alternative to log into the (Forti-)cloud. 99% of my customers object to the idea.

Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
Kpax
New Contributor

ede_pfau wrote:

 

IMHO part of the problem is the half-baked alternative to log into the (Forti-)cloud. 99% of my customers object to the idea.

agree with that, this is secondary option for me, the main one is Zabbix 

 

Thanks in advance,

Kpax

Thanks in advance, Kpax
Kpax
New Contributor

Thanks guys, for lighting the way.

I will leave it as is.

 

regards,

Kpax

 

Thanks in advance,

Kpax

Thanks in advance, Kpax
Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors