I just ran into this:
I have an Adom in FMG. In this is a FGT100F I want to use for lab purposes. It was reseted to factory default before adding it to FMG. It added successfully and I can configure it in FMG. I was able to deploy device configuration to it successfully.
I then created a provisioning system template that assigns system dns, ntp etc. The template also does the interface config (creating vlan interfaces and afterwards configuring them). For the interface configuration one variable out of the policy package is used.
Once I assign that FGT100F to that template and try to deploy device config only it fails. There is no installation log available and the progress log only says "[fw-teststandort1[copy] root] Copy global shared objects failed (adom:my_Adom, dev:fw-teststandort1) (reason:none)". It does not provide any further information. Also dia deb app securityconsole 255 does not provide any more information.
Does anyone have a hint on how to further debug this to find the culprit?
The only non devdb object used is that variable and its only used in interface configs. The variable in policy package does have a valid per-device-mapping for this FGT100F.
--
"It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams
Solved! Go to Solution.
Update: I found the culprit now. The template did deploy when the interface section was disabled. So the culprit had to be in there and accoarding to the given error message it could only be that variable. I then used the "Post Action View" button to get a post action view for this particular FGT and this showed my that there were some copy-paste-failures on the variable somewhere (It however did not show me where but I did find them though).
After correcting these it worked.
Why cannot that be shown in the provided Logs and Cli debugs?
--
"It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams
Update: I found the culprit now. The template did deploy when the interface section was disabled. So the culprit had to be in there and accoarding to the given error message it could only be that variable. I then used the "Post Action View" button to get a post action view for this particular FGT and this showed my that there were some copy-paste-failures on the variable somewhere (It however did not show me where but I did find them though).
After correcting these it worked.
Why cannot that be shown in the provided Logs and Cli debugs?
--
"It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams
| User | Count |
|---|---|
| 2737 | |
| 1418 | |
| 812 | |
| 739 | |
| 455 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.