Getting error in installation from pushing policies to fortinet firewalls in fortimanager

[Bharath_v]

Actually We defined an ADOM and inside that we have a firewall which is in some location (let' s say for example)after creating policies and all those procedures when i try to install from FORTIMANAGER after the progress bar gone to 66 percent it showing ( ERROR IN INSTALLING THE PACKAGES)error and i don' t even know how to find what is the error in that installation procedure, and it is happening in version 5 and above, the same policies are getting installed in version 4.. so please help me

[Uwe_Sommerfeld]

Hi Bharath.v, the following might assist to pinpoint the issue. On the device you can see what the manager is doing by activating the usual cli debug: diag debug reset diag debug en diag debug cli 7 => and then try to deploy. On the manager, you can see thing happening using diag debug app securityconsole 255 diag debug en Might be helpful.

[Bharath_v]

Thanks for the reply. I have tried it and i got the result from fortimanager is that " INSTALLATION TO THE REAL DEVICE FAILED" Do you know what it means?Once again it is happening in version 5 of the firewalls, does the version will be any problem?

[scao_FTNT]

Hi, Bharath.v, what is the FMG version (5.0.7?) and FGT version (5.0.9?) and for " INSTALLATION TO THE REAL DEVICE FAILED" pls go to device level, system - dashboard - Configuration and Installation Status widget - Total Revisions - [Revision History] link, and in that revision list page, click " View Installation History" link and find that latest install log and log has details for what install or verified failed Thanks Simon

[Bharath_v]

Hi Thanks for the reply, I am using Version 5.0.6 in FortManager and in Forti Firewall Version 5 and Patch 7 I have tried in logs it' s showing install and save failed.

[Matthew_Mollenhauer]

This sounds similar to a bug we had when trying to install a package update to our firewalls. The problem occurred when we removed a per-ip shaper from a policy, the FMG would seg fault when doing an installation preview. This was between 5.0.7 (FMG) & 5.0.7 (FGT) My workaround was to manually make those changes on the actual Fortigates so that they matched the package on the FMG, then I was able to do the install. This was fixed in FMG 5.2.0, or at least the release notes say it' s been fixed. My best advice would be to upgrade the FMG to 5.2.0, it' s backwards compatible to 5.0.5 through 5.0.9 so you should be fine. While you' re issue may well be different to mine, the workaround may still work, ie; manually update the Fortigate to match your package and see if it installs. Regards, Matthew