Description
It is possible that logs are not displayed on the FortiGate unit because of a corruption in the flash memory. There are a number of reasons that the flash memory could be corrupted including wrong upgrade/downgrade or power failures.
Solution
A quick check of the FortiGate unit can be made using "get system status" and this will show the status of the flash disk.
Fortigate # get system status
Version: Fortigate-200B v4.0,build0513,120130 (MR3 Patch 5)
Virus-DB: 15.00340(2012-03-20 19:58)
Extended DB: 14.00000(2011-08-24 17:09)
IPS-DB: 3.00165(2012-03-19 23:12)
FortiClient application signature package: 1.472(2012-03-14 02:55)
Serial-Number: FG200B0000000000
BIOS version: 04000007
Log hard disk: Need format
Internal Switch mode: switch
Hostname: Fortigate
Operation Mode: NAT
Current virtual domain: root
Max number of virtual domains: 10
Virtual domains status: 1 in NAT mode, 0 in TP mode
Virtual domain configuration: disable
FIPS-CC mode: disable
Current HA mode: a-p, master
Distribution: International
Branch point: 513
Release Version Information: MR3 Patch 5
System time: Wed Mar 21 10:52:47 2012 |
The only solution to this problem is to perform a "exec formatlogdisk"
FortiGate # exec formatlogdisk
Care should be taken in using this command as it format the storage erasing all data on it, including logs, quarantine files, WanOpt caches and require the unit to reboot.
