Fortimanager looses FGM-Access over time

[yoloknight]

Hi, I´m using a Fortimanager (v.6.2.6) to serveral Fortigates (also v.6.2.6). Over time the Fortimanager looses the FGM-Acces to some Fortigate´s and I already debbugging it with this cookbooks: https://kb.fortinet.com/kb/documentLink.do?externalID=FD33882 https://kb.fortinet.com/k....do?externalID=FD48001 https://docs.fortinet.com/document/fortimanager/6.2.0/cli-reference/861511/fgfm-reclaim-dev-tunnel (... [size="4"]But in the end I dont find the issue. Also i checked the ports for Input/Output errors (zero tx/rx errors, only sw_in_drop_pkts : 4  errors!?)[/size]

[size="4"]What can be the issue here?[/size]

[ajoy]

Hello yoloknight,

Are you able to attach the sniffer captures during the time of the issue 

Run sniffer on FortiGate using Putty with SSH connection and all session output logging:

diag sniff pack any "port 541 and host x.x.x.x" 6 0 a <- Where x.x.x.x is the FortiManager IP address.

At the same time, run a sniffer on FortiManager with the following syntax:

diag sniff pack any "port 541 and host y.y.y.y" 3 0 a <- Where y.y.y.y is the FortiGate IP address.

Along with the debugs:

Debug on FortiGate.

diag debug reset
diag debug application fgfmd 255
diag debug console time enable
diag debug en

--replicate issue--
diag debug disable

Regards,
ajoy