Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Yerlikaya06
New Contributor II

I can't delete Malware Hash Threat Feed (Fortigate 600E - release v7.2.3 )

I can never delete Security Fabric > External Connectors > Malware Hash - Threat Feed that I created on root user on fortigate 600E device with FortiOS v7.2.3

FortiGate 

20 REPLIES 20
funkylicious
SuperUser
SuperUser

Hi,

Any chance this object is being used somewhere ? You can right click it and View Object Usage.

---------------------------
geek
---------------------------
---------------------------geek---------------------------
Yerlikaya06

No, there is no usage. i can right click it viewing "Ref. Count=0"

ede_pfau
SuperUser
SuperUser

In CLI, type

show full | grep -f "threat\|malware\|connector"

 

or the like, to get to the config part where this has been mentioned.

A quick before-after comparison of your config files would also be helpful.

Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
Yerlikaya06

I ran the above command in the CLI but didn't see anything significant so that I could delete the "malware hash".

ede_pfau
SuperUser
SuperUser

Just added it to my FGT and got this (single) place in the config which changed:

 

config system external-resource
    edit "myMalwareHash"
        set type malware
        set username "ede_pfau"
        set password ENC 022...UtwQ==
        set comments "bla"
        set resource "http://www.mywebserver.de/myhashfile"
    next
end

So, a simple

config system external-resource
    del "myMalwareHash"
end

should do.

Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
Yerlikaya06

Thanks a lot for your help. When i try to delete i get the following errors; 

CLI;

1.png

GUI;

2.png

funkylicious

Just a thought, have you tried disabling it before trying to delete it ?

---------------------------
geek
---------------------------
---------------------------geek---------------------------
Yerlikaya06

Yes i disabled it first then tried deleting it but it didn't work.

ede_pfau

Why not trying to find the name now?

show full | grep -f testtt
Ede Kernel panic: Aiee, killing interrupt handler!
Ede Kernel panic: Aiee, killing interrupt handler!
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors