Technical Tip: FortiGate device model fails CLI credential validation

[cmaheu]

Description
The following symptoms are experienced:

• FortiGate firewall fails credential validation in Topology
  
• FortiSwitches in link mode are not added on a re-sync interfaces
• Unable to L2 or L3 poll the FortiGate

Scope

Version: 8.x

Solution
Verify the CLI account specified in the FGT Model Configuration in Topology is a local System Administrator account that can access both SSH and REST API.  Both SSH (TCP 22) and REST API (TCP 443 or as defined on the FGT) are used to communicate with FortiGate devices.
 

For details, refer to the appropriate reference manual in the Fortinet document library:

FortiGate Endpoint Management Integration

FortiSwitch Integration