FortiManager 5.4 - Add Device fail???

[Dominic]

I have FGT3140B (v 5.0.7) in HA mode, and i am not able to add device in ADOM v. 5.0

The Add device wizard "jam" just after the wizard end to run proccess Retrieving IPS signature information.  I recieve in the status information "data not exist".  The process Creating initial configuration file are blinking, but not finishing.  I have wait over 30 mins, and nothing to do.  I can just press cancel button.

If i cancel the operation, the device are not completly added.

Any one have an idea?  All my fortigard services on the FGT are a green check status

[scao_FTNT]

pls help check 2 places

1. in system settings - task monitor, the add device task details, if any error report there?

2. enable debug level logging "conf sys locallog disk setting", and re-add device fail, any log mentioned errors in system settings event log view?

Thanks

Simon

[Dominic]

Hi Simon,

i have check in the 2 spot you have demand.

task monitor and event log

i dont understand why, but who i can find the WF who dont work properly?

did you have any ideas of what does it mean the number 32??

[scao_FTNT]

from the error, retrieve fail is because of an invalid config, which is from webfilter profile, category, there has a category ID 32 in the config

this 32 is not a valid category from FOS 5.0 (I think is for FOS 4.3 config), and maybe from upgraded FGT config

you can try to manually remove it from your FGT config and re-add see if works

Thanks

Simon

v2c # conf webfilter profile v2c (profile) # ed wfp1 v2c (wfp1) # conf ftgd-wf v2c (ftgd-wf) # conf filters v2c (filters) # ed 2 v2c (2) # set category <id>    category ID   0 Unrated   1 Drug Abuse   2 Alternative Beliefs   3 Hacking   4 Illegal or Unethical   5 Discrimination   6 Explicit Violence   7 Abortion   8 Other Adult Materials   9 Advocacy Organizations  11 Gambling  12 Extremist Groups  13 Nudity and Risque  14 Pornography  15 Dating  16 Weapons (sales)  17 Advertising  18 Brokerage and Trading  19 Freeware and Software Downloads  20 Games  23 Web-based Email  24 File Sharing and Storage  25 Streaming Media and Download  26 Malicious Websites  28 Entertainment  29 Arts and Culture  30 Education  31 Finance and Banking  33 Health and Wellness  34 Job Search  35 Medicine  36 News and Media  37 Social Networking  38 Political Organizations  39 Reference  40 Global Religion  41 Search Engines and Portals  42 Shopping and Auction  43 General Organizations  44 Society and Lifestyles  46 Sports  47 Travel  48 Personal Vehicles  49 Business  50 Information and Computer Security  51 Government and Legal Organizations  52 Information Technology  53 Armed Forces  54 Dynamic Content  55 Meaningless Content  56 Web Hosting  57 Marijuana  58 Folklore  59 Proxy Avoidance  61 Phishing  62 Plagiarism  63 Sex Education  64 Alcohol  65 Tobacco  66 Lingerie and Swimsuit  67 Sports Hunting and War Games  68 Web Chat  69 Instant Messaging  70 Newsgroups and Message Boards  71 Digital Postcards  72 Peer-to-peer File Sharing  75 Internet Radio and TV  76 Internet Telephony  77 Child Education  78 Real Estate  79 Restaurant and Dining  80 Personal Websites and Blogs  81 Secure Websites  82 Content Servers  83 Child Abuse  84 Web-based Applications  85 Domain Parking  86 Spam URLs  87 Personal Privacy 145 Only_used_in_LR_01 140 custom1 141 custom2 150 gl1 146 lc1 147 lc2 148 lc3_notused 142 simon1 143 simon2 144 simon3 149 simon4_FMG 188 simon5 151 simon_lc_1 152 simon_lc_2 153 simon_lc_3 154 simon_lc_4

[Dominic]

Thanks Simon For your help. :)

After erasing some unused WF, i have try to add my device, and it's working now.