FortiGate200B Will not boot.

[Keith42]

Hi Everyone, My first post and it' s a problem. Here is the console log of the affected unit just before it hangs.

 FortiGate-200B (14:12-11.05.2009)
 Ver:04000006
 Serial number:FG200B*********
 RAM activation
 Total RAM: 1024MB
 Enabling cache...Done.
 Scanning PCI bus...Done.
 Allocating PCI resources...Done.
 Enabling PCI resources...Done.
 Zeroing IRQ settings...Done.
 Verifying PIRQ tables...Done.
 Disabling local APIC...Done.
 Boot up, boot device capacity: 3824MB.
 Press any key to display configuration menu...
 ......
 ../src/device/usb2/usb.c: 342: usb_start_wait_urb status!=0(-32)
 
 ERROR: Bulk read CSW ret = -32
 ERROR: ll_read_block( 5e08, 37010000, 20081, 20) = -1
 ../src/device/usb2/usb.c: 342: usb_start_wait_urb status!=0(-32)
 
 ERROR:Bulk read data ret = -32
 ../src/device/usb2/usb.c: 342: usb_start_wait_urb status!=0(-32)
 

Does anyone know what is causing this error. The 3 USB ports are empty on the FG200B Thanks

[Keith42]

I miffed. I realy am. I have 8x5 Enhanced Support which means I have to ship the unit back to Fortinet before they will send me back a replacement. I bought it in Ireland and they want me to ship to France at my own expense. Sure HP will ship you any part first and then take back the defective part at their expense. Rant over.

[Munkus]

Ya, bit of a Joke really. I' ve two 200Bs and this has been happening for the last six months. One of them was RMA' d in December and the other one died yesterday. it starts with the CPU going to 95% and on reboot you get the ERROR: Bulk read CSW ret = -32 Did the HQIP and it passed, TFTP' d the firmware, but on every second reload it' s back to ERROR: Bulk read CSW ret = -32 ERROR: ll_read_block( 5e08, 37810000, 4081, 10) = -1 ../src/device/usb2/usb.c: 342: usb_start_wait_urb status!=0(-32) In Ireland too, so it takes a week and a half to RMA with the 8X5 so it' s vital to have 2 units. I' ve lost complete faith in these devices now.

[Dave_Hall]

We have 8 x 5 Enhanced Support as well, but it includes advanced replacement. Just checked fortinet' s website and found this.....

FortiCare 8x5 Enhanced Support Fortinet' s FortiCare 8x5 Enhanced Support offering is designed for customers who need support during local business hours. FortiCare 8X5 Enhanced Support includes access to support services via telephone, the customer support web portal and online chat system. Additionally, 8x5 Enhanced Support includes advanced exchange hardware replacement. * Note: Advanced exchange hardware replacement may not be available in all locations.

Guess the advanced replacement is not offered in your area.

[ede_pfau]

To be honest, AHR does not really make a difference. Just that you have to ship the defective unit - with insurance - to Sophia Antipolis near Nizza. The insurance alone will be 1% of the list price, or you can ship without insurance and pay list price if it get' s lost. For years, I thought that is a major weakness of Fortinet' s service offerings. Meanwhile, one local (German) distributor offers nationwide AHR for an additional fee; no FGT leaves my office without any more.

[romanr]

ORIGINAL: ede_pfau The insurance alone will be 1% of the list price, or you can ship without insurance and pay list price if it get' s lost.

Hi, I know that' s a bit off-topic - but an interesting topic for me. For sending back defective boxes we always use the " Defective Value" for customs and insurance that Fortinet tells its customers in the following docs: http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=FD33278 So insurance isn' t an expensive thing to us. Is there any reason, you use the list price for sending defective units? br, Roman

[Keith42]

Hi everyone, Well I sent off the unit to France via DHL on Monday. I decided to pay the insurance as it cost a lot to buy it even though it was faulty and loosing it was not an option. By Friday I had my replacement FGT200B so that went well. I' ve flashed it to v4 MR3 Patch11 and uploaded the config. All is well again.

I' ve two 200Bs and this has been happening for the last six months. One of them was RMA' d in December and the other one died yesterday. it starts with the CPU going to 95% and on reboot you get the

Munkus I don' t fancy going through this again and from your tail I should cross my fingers. Keith

[Dave_Hall]

I' ve flashed it to v4 MR3 Patch11 and uploaded the config. All is well again.

Confirmed you see any event logs -- I had to reformat the logging disk after getting a new 200B RMA replacement.

[Keith42]

Confirmed you see any event logs -- I had to reformat the logging disk after getting a new 200B RMA replacement.

Yea I see data filling some of the event logs.

Logging and Archiving	3.5GB		
 Disk Logging		1.0GB	722MB	70%	
 DLP Archive		25MB	0MB	0%	
 Historic Reports	250MB	35MB	14%	
 IPS Packet Archive	25MB	0MB	0%	
 Quarantine		25MB	0MB	0%	
 SQL Database		700MB	2MB	0%

On the logging side of things is it worth getting the SSD drive for the Fortigate 200B?

[ede_pfau]

Well, my reasoning is such: if Fortinet sends me a (new/refurbished) FGT they assume I send in the defective unit. If I don' t I will have to pay the list price for a new unit. Now my reasoning is that if the defective unit never arrives in France this would be the same as not sending it in at all - no counterpart, full price. So I have to get insurance to defend myself for this possible loss. Just imagine a 310B unit or such...

[romanr]

ORIGINAL: ede_pfau Well, my reasoning is such: if Fortinet sends me a (new/refurbished) FGT they assume I send in the defective unit. If I don' t I will have to pay the list price for a new unit. Now my reasoning is that if the defective unit never arrives in France this would be the same as not sending it in at all - no counterpart, full price. So I have to get insurance to defend myself for this possible loss. Just imagine a 310B unit or such...

As I am really interested having clarity on this topic I did ask Fortinets country mgmt here in the region. Seems like I was the first one to ask for the Austrian/German/Suisse region - I should get a proper answer this weak and let you know!