SSL-VPN Web Portal breaks after 7.4.8 upgrade on 2GB models

[Rino_B]

Hi there,

On entry-level FortiGate models, the SSL-VPN web portal breaks after the update to FortiOS 7.4.8.

Update 2

diagnose debug console timestamp enable
diagnose debug application sslvpn -1
diagnose debug application fnbamd -1
diagnose debug enable

2025-06-05 11:17:43 [17810:root:4]fsv_check_path_passed:997 No access: check path failed /migadmin/rmt_index.html, /data/migadmin, /migadmin
2025-06-05 11:17:43 [17810:root:4]sslvpn_zip_handler:136 sslvpn check path failed.
2025-06-05 11:17:43 [17810:root:4]fsv_check_path_passed:997 No access: check path failed /migadmin/sslvpn/css/ssl_style.css, /data/migadmin/sslvpn/css, /migadmin/sslvpn/css
2025-06-05 11:17:43 [17810:root:4]sslvpn_zip_handler:136 sslvpn check path failed.

Update 3

The issue has been identified as BUG ID 1164811: https://docs.fortinet.com/document/fortigate/7.4.8/fortios-release-notes/236526/known-issues

[Rino_B]

diagnose debug console timestamp enable
diagnose debug application sslvpn -1
diagnose debug application fnbamd -1
diagnose debug enable

2025-06-05 11:17:43 [17810:root:4]fsv_check_path_passed:997 No access: check path failed /migadmin/rmt_index.html, /data/migadmin, /migadmin
2025-06-05 11:17:43 [17810:root:4]sslvpn_zip_handler:136 sslvpn check path failed.
2025-06-05 11:17:43 [17810:root:4]fsv_check_path_passed:997 No access: check path failed /migadmin/sslvpn/css/ssl_style.css, /data/migadmin/sslvpn/css, /migadmin/sslvpn/css
2025-06-05 11:17:43 [17810:root:4]sslvpn_zip_handler:136 sslvpn check path failed.

[Lennart]

Same as mine, the files don't exist. I was trying to compare to 7.4.7, but then i ran into issue #2, which I'm guessing is going to need a console cable connected. Below example of ssl_style.css missing.

[BillH_FTNT]

Thank you, Rino_B and Lennart, for the logs and information. Your cases seem to match internal ticket #1164811. The Engineering team is currently working on it, and I’ll provide you with an update soon. Thanks again

Bill

[Tune_82]

I am experiencing exactly the same issue on 60F after scheduled upgrade to 7.4.8.

Joining this topic to follow progress. 

[macolinob]

We have this issue, but it is on a 2200E, then downgraded to 7.4.7 and we still have the issue.

Update: So, this was not the same issue. The issue was that we upgraded to 7.4.8 from 7.4.7 and we have SSL Web VPN with MFA. When we tested after the upgrade SSO was not working, gave "Permission Denied". In my haste I grouped access denied in the same category. So, we downgraded, and the error persisted. The issue was that we did not have profiles for the SSO groups, but we didn't have them in the first place when we were on 7.4.7. Very weird, and sorry I should have read more clearly the error on this page.

[Rino_B]

That's interesting @BillH_FTNT

[BillH_FTNT]

Hi macolinob;

Could you please share the configuration (such as backup files) for both versions in your case?

I will compare them and attempt to reproduce the issue in my lab. It would be a great help to have everything set up exactly as in your network. Many thanks

Bill