Fortigate60F , Unable to login Via Web Portal anymore. only CLI working

[AdilHamid]

Hi there , 

we are using Fortinet 60F and it was working all good and I can login via Https , but suddenly its stop working , i cannot access it , I have tried rebooting but no luck , the only way i can access is TELNET and I am not good on CLI , i have check some basic commands , i have tried already killing the Https daemon , and check the ports (http , https) for connectivity but I am still not getting any luck , I have also checked the storage which is all good, I am not sure what the Issue is , could this be a trusted IP issue ? i don't know as i was using the same IP address to access the console before. Any help will be much appreciated :) , Thanks in Advance

[smaruvala]

Hi,

- First lets confirm the destination MAC in the SYN packet is the MAC address of the interface which you are accessing.  You can try to capture from GUI and download the file and verify the MAC address of the SYN packet.

- Second as @saneeshpv_FTNT mentioned try to take a debug flow output for the communication. commands are already provided before.

Regards,

Shiva 

[AnthonyH]

Hello AdilHamid,

Could you please check if the admin server certificate has been configured:

config sys global

set admin-server-cert Fortinet_Factory

end

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Cannot-access-the-FortiGate-web-admi...

[AdilHamid · Accepted solution]

today i got my firewall support renewed , and the issue was the "trusted host" , only one public IP was allowed to access it , and it was the last support company did this in intention , see below the results. I have public their public address as well.

Thanks everyone for your help @saneeshpv_FTNT @AnthonyH @smaruvala @Rajan_kohli