set banned-cipher prevents pushing the device configuration on trial Fortigate VM

[mayar]

Hi there,

I'm having issue in a lab (build by me) that i've created with trial version of FortiGate VMs (x2), FortiManager (x1) and FortiAnalyzer (x1).

I've added two FortiGates to the FortiManager, and everything was working without issues, untill the first device installation.

The FortiManager keeps showing error in the installation of device configuration, after digging around, i found out that the issue occurs because of the "set banned-cipher" command. This command seems to be not available in the trial fortivm, and in the FortiManager I wasn't able to remove the setting from the CLI configuration (because it requires at least 1 cipher that has to be banned).

The running versions of the devices are;

FortiGate VMs KVM 7.4.4 build 2662 (Feature)

FortiManager v7.4.3-build2487 240514 (GA)

FortiAnalyzer (while it doesn't have to do with the issue) v7.4.3-build2487 240514 (GA)

When i deselect the banned-cipher and click apply (in the CLI configuration of the device) the ciphers SHA1, SHA256 and SHA384 are reselected again!

Did anyone encounter this issue?

is there a solution for this issue?

[AmedBoti]

Guys, any update on this issue?

[funkylicious]

I dont think its an issue per-say more a limitation of the trial VM, those params might not apply.

https://docs.fortinet.com/document/fortigate/7.2.4/administration-guide/441460/permanent-trial-mode-...

• Support for low encryption operation only, except for GUI management access and FortiManager communications

[AmedBoti]

I see now, it must be that.. well not much to operate and enjoy together with fortimanager.

[roquexz]

Hi,

I had the same error. The only solution that I found was always retrieve the configuration to have my FortiGate sync

First run the command: diagnose dvm device list

If the status is out-of-sync you will need to retrieved the FortiGate configurations.

To retrieve the configuration you go to Device Manager > Device & Groups and select your device.

Then go to Dashboard: Summary and scroll down to Configuration and Instalation.

Then click in Retrieve Config and done.

[roquexz]

Hi Guys. I found the solution. You need to disable the VPN SSL on your FortiGate on CLI.

config vpn ssl settings

set status disable

end

Then retrieve the configuration to your FortiManager and this error is done.