Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
ronsametcohen
New Contributor

install and save finished status=failed

Hello ,

 

I got this error when I tried to install policy .

 

FortiManager v7.2.1

Fortigate firewall v7.2.3

 

ronsametcohen_0-1671905834202.png

 

Please HELP :)

3 REPLIES 3
funkylicious
Contributor III

Hi,

What does the error log file say ?

You can do a debug from SSH on FMG when you install it to see more , just remember to do debug disable at the end of the tshoot.

 

# diag debug application securityconsole 255
# diag debug enable

geek
geek
ronsametcohen
New Contributor

Forti-Manager # diag debug application securityconsole 255

Forti-Manager # diag debug enable

Forti-Manager # Request:
{ "client": "gui webworker:32271", "id": 1, "method": "exec", "params": [{ "data"                                                                                                                   : { "adom": 3, "dev_rev_comments": "", "flags": 2, "master_session": 56965, "pkg"                                                                                                                   : 4132, "scope": [{ "oid": 166}]}, "target start": 1, "url": "install\/package"}]                                                                                                                   , "root": "securityconsole", "session": 56965}
Chkperm Response:
{ "id": 1, "result": [{ "status": { "code": 0, "message": "OK"}, "url": "install\                                                                                                                   /package"}], "session": 56965}
SECURITY_CONSOLE: master_session id is 56965
Response:
{ "id": 1, "result": [{ "data": { "task": 43}, "status": { "code": 0, "message":                                                                                                                    "OK"}, "url": "install\/package"}]}
SECURITY_CONSOLE: securityconsole.c:833, mm start adom_id=3, pkg=4132, flags=2 "p                                                                                                                   review "
SECURITY_CONSOLE: Load shared objects time: 0 hours 0 minutes 0.093352 seconds.
SECURITY_CONSOLE: Load device candidates n=1 : 0 hours 0 minutes 0.000823 seconds                                                                                                                   .
SECURITY_CONSOLE: Load device candidates time: 0 hours 0 minutes 0.000974 seconds                                                                                                                   .
Request:
{ "client": "securityconsole:32276", "id": 1, "method": "exec", "params": [{ "dat                                                                                                                   a": { "adom": 3, "ncpu": 1, "pid": 32276, "timeout": 0}, "target start": 1, "url"                                                                                                                   : "cpu-token\/acquire"}], "root": "securityconsole"}
SECURITY_CONSOLE: __add_to_queue,246: add pid 32276 to queue (active = 0, queued                                                                                                                    = 1)...
Response:
{ "id": 1, "result": [{ "status": { "code": 0, "message": "OK"}, "url": "cpu-toke                                                                                                                   n\/acquire"}]}
SECURITY_CONSOLE: __flush_queue,166: activate pid 32276, cpu = 1, available = 3 (                                                                                                                   active = 1, queued = 0)...
SECURITY_CONSOLE: create task lines done,r=0
SECURITY_CONSOLE:
Create task lines time:: 0 hours 0 minutes 0.004698 seconds.
SECURITY_CONSOLE: Getting firewall policy list: n=2.
SECURITY_CONSOLE: Getting firewall multicast-policy list: n=0.
SECURITY_CONSOLE: Getting firewall multicast-policy6 list: n=0.
SECURITY_CONSOLE: Getting firewall proxy-policy list: n=0.
SECURITY_CONSOLE: Getting firewall local-in-policy list: n=0.
SECURITY_CONSOLE: Getting firewall local-in-policy6 list: n=0.
SECURITY_CONSOLE: Getting firewall shaping-policy list: n=0.
SECURITY_CONSOLE: Getting firewall security-policy list: n=0.
SECURITY_CONSOLE: Getting firewall acl list: n=0.
SECURITY_CONSOLE: Getting firewall acl6 list: n=0.
SECURITY_CONSOLE: Getting firewall interface-policy list: n=0.
SECURITY_CONSOLE: Getting firewall interface-policy6 list: n=0.
SECURITY_CONSOLE: Getting firewall DoS-policy list: n=0.
SECURITY_CONSOLE: Getting firewall DoS-policy6 list: n=0.
SECURITY_CONSOLE: Getting webfilter ftgd-local-rating list: n=0.
SECURITY_CONSOLE: Getting user radius list: n=0.
SECURITY_CONSOLE: Getting firewall central-snat-map list: n=0.
SECURITY_CONSOLE: Getting user fsso-polling list: n=0.
SECURITY_CONSOLE: Getting endpoint-control fctems list: n=5.
SECURITY_CONSOLE: Getting firewall internet-service-custom list: n=0.
SECURITY_CONSOLE: Getting firewall internet-service-addition list: n=0.
SECURITY_CONSOLE: Getting firewall shaping-profile list: n=0.
SECURITY_CONSOLE: Getting dynamic interface list: n=103.
SECURITY_CONSOLE: Getting system replacemsg-group list: n=1.
SECURITY_CONSOLE: Getting authentication rule list: n=0.
SECURITY_CONSOLE: Getting authentication setting list: n=1.
SECURITY_CONSOLE: Getting log npu-server list: n=0.
SECURITY_CONSOLE: Getting user nac-policy list: n=0.
SECURITY_CONSOLE:
Prepare global policies time: 0 hours 0 minutes 0.078789 seconds.
SECURITY_CONSOLE: (32282) pid=1, devid = 166, idx=0, max_cpu=1.
__send_gui_notify: {"msg":"notify", "from":"backend","collection":"workspace","me                                                                                                                   thod":"lock","params":{"adom_oid":3,"dev_oid":166,"obj_oid":0}}
SECURITY_CONSOLE:
Prepare device    (1) data time: 0 hours 0 minutes 0.187440 seconds.
SECURITY_CONSOLE: Load dynamic obj time: 0 hours 0 minutes 0.000872 seconds.
SECURITY_CONSOLE: (1) [Meir[copy] root] Start copying policy to devdb, device(Mei                                                                                                                   r), vdomid(root) (reason:none)
SECURITY_CONSOLE: (1) Using mm method.
SECURITY_CONSOLE: Installing endpoint-control fctems
SECURITY_CONSOLE: Installing endpoint-control fctems completed - 5 entries instal                                                                                                                   led, 0 errors
SECURITY_CONSOLE: Installing system replacemsg-group
SECURITY_CONSOLE: Installing system replacemsg-group completed - 0 entries instal                                                                                                                   led, 0 errors
SECURITY_CONSOLE: Installing authentication setting
SECURITY_CONSOLE: Installing authentication setting completed - 1 entries install                                                                                                                   ed, 0 errors
SECURITY_CONSOLE: copy_shared_obj_2_dev_vdom: 0 hours 0 minutes 0.000567 seconds.
SECURITY_CONSOLE: Installing dynamic interface
SECURITY_CONSOLE: Installing dynamic interface completed - 4 entries installed, 0                                                                                                                    errors
SECURITY_CONSOLE: Installing firewall policy
SECURITY_CONSOLE: Installing firewall policy completed - 2 entries installed, 0 e                                                                                                                   rrors
SECURITY_CONSOLE: copy all policies: 0 hours 0 minutes 0.028967 seconds.
add 0 fail references back to pending list
SECURITY_CONSOLE: (1) [Meir[copy] root] Copy done (reason:none)
SECURITY_CONSOLE: (1) Compile time: 0 hours 0 minutes 0.048300 seconds.
SECURITY_CONSOLE: (1) Import time: 0 hours 0 minutes 0.007674 seconds.
SECURITY_CONSOLE: (1) Change dvm status time: 0 hours 0 minutes 0.000001 seconds.
SECURITY_CONSOLE: allow_global=1, dev global dirty=0, dev global changed = 0
SECURITY_CONSOLE: (1) device 166 connection was down
SECURITY_CONSOLE: (1) Copy to device done
SECURITY_CONSOLE: (1) Prepare dev install file time: 0 hours 0 minutes 0.232164 s                                                                                                                   econds.
SECURITY_CONSOLE:
(1) Overall time: 0 hours 0 minutes 0.478953 seconds.
SECURITY_CONSOLE:
1 of 1 devices is done
Device Handle handle refcnt = 1
SECURITY_CONSOLE: [1] pid=32282: installed=0, err=0, copied=1, failed=0
SECURITY_CONSOLE: reap child 32282 (0)
SECURITY_CONSOLE: __read_copy_result,1916:Installed=0, err=0, copied=1, failed=0
SECURITY_CONSOLE: Installed=0, err=0, copied=1, failed=0, max_cpu=1
SECURITY_CONSOLE: Overall time: 0 hours 0 minutes 0.594676 seconds.
Prepare /var/tmp/securityconsole/56965/install_summary.
SECURITY_CONSOLE: (1) [Write summary[preview] ] Write preview done (reason:none)
Global Handle handle refcnt = 1
SECURITY_CONSOLE:
All device is done, elapse time: 0 hours 0 minutes 0.614181 seconds.
Request:
{ "client": "securityconsole:32276", "id": 4, "method": "exec", "params": [{ "dat                                                                                                                   a": { "pid": 32276}, "target start": 1, "url": "cpu-token\/release"}], "root": "s                                                                                                                   ecurityconsole"}
SECURITY_CONSOLE: __remove_proc,276: remove pid 32276 from active list (active =                                                                                                                    0, queued = 0)...
Response:
{ "id": 4, "result": [{ "status": { "code": 0, "message": "OK"}, "url": "cpu-toke                                                                                                                   n\/release"}]}
SECURITY_CONSOLE: securityconsole.c:870(), mm finish adom_id=3
SECURITY_CONSOLE: security_console_reclaim_child,598: try to reclaim child...
SECURITY_CONSOLE: reap child 32276 (0)
SECURITY_CONSOLE: refresh wait queue, triggered session=56965
Request:
{ "client": "gui webworker:32328", "id": 1, "method": "exec", "params": [{ "data"                                                                                                                   : { "adom": 3, "scope": [{ "oid": 166, "vdom_oid": 3}]}, "target start": 1, "url"                                                                                                                   : "package\/commit"}], "root": "securityconsole", "session": 56965}
Chkperm Response:
{ "id": 1, "result": [{ "status": { "code": 0, "message": "OK"}, "url": "package\                                                                                                                   /commit"}], "session": 56965}
Response:
{ "id": 1, "result": [{ "data": { "task": 44}, "status": { "code": 0, "message":                                                                                                                    "OK"}, "url": "package\/commit"}]}
SECURITY_CONSOLE: __pmap_update_by_member,5570: pkg=4132, Meir, preview_n = 1
SECURITY_CONSOLE: security_console_ctx_package_commit,5941: install 1 devices, reinstall 0 devices.
__send_gui_notify: {"msg":"notify", "from":"backend","collection":"workspace","method":"unlock","params":{"adom_oid":0,"dev_oid":166,"obj_oid":0}}
SECURITY_CONSOLE: security_console_reclaim_child,598: try to reclaim child...
SECURITY_CONSOLE: reap child 32332 (0)
SECURITY_CONSOLE: refresh wait queue, triggered session=56965
Ranjith1

Hi,

 

We also getting same problem. There is a sum Bug is there in 7.2.1. the Bug is fixed in upcoming versions like 7.2.2. This way we get the feed back in Fortinet team. 

ranjith
ranjith
Labels
Top Kudoed Authors