readonly remote access to Fortigate40F from Forticloud

[salassilvaj]

I've upgrade by gui a 40F Fortigate from 07.4.0 to 07.4.2 and readonly view is the only access I have by gui. By cli all permissions are granted, until now according troubleshooting there is no chance to roll back from 07.4.2 to 07.4.0 by gui or cli, cli error output shows: "Firmware update license is expired. Please update to a valid license" similar output showed by GUI.

Community, do you have any feedback?

[akumar02 · Accepted solution]

Hello Jonathan,
Are you logged in as "admin" to the fortigate?
Also, How did you upgrade the FortiOS earlier? Did you download the image from support.fortinet.com or directly upgrade it from Fortigate GUI?
I would recommend you to console into the Fortigate and rollback to the previous version:

Rolling back the device is simply booting to the previous partition, which has the old firmware and config file. You may boot to the new firmware again if you choose.
The commands to do so are as follows

diag sys flash list <----------------------------------list partitions and see if they are active.
exec set-next-reboot <primary|secondary> <-----------indicate what partition to boot from (1= primary, 2 = secondary)
exec reboot

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Selecting-an-alternate-firmware-for-the-ne...

If this doesn't help then you can boot up from other partition as well:

https://help.fortinet.com/fweb/admin_hlp/4-4-3/wwhelp/wwhimpl/common/html/wwhelp.htm?context=FortiWe...

[salassilvaj]

It works, really preciated

# get sys stat
Version: FortiGate-40F v7.4.0,build2360,230509 (GA.F)
Security Level: 2
Firmware Signature: certified

# diag sys flash list

Partition Image TotalSize(KB) Used(KB) Use% Active
1 FGT40F-7.04-FW-build2360-230509 253920 171908 68% Yes
2 FGT40F-7.04-FW-build2571-231219 253920 187676 74% No

[akumar02]

I am glad it worked for you.