Technical Tip: GUI is not reachable after upgrade

[sagha]

Description
This article describes that GUI can stop working after upgrade and how it can be fixed.

Solution
Check if the httpsd process is running on FortiGate using the below command.

FGT# diagnose sys process pidof httpsd

The above output will be empty.

Check if the HTTPSD shows up using following command:

FGT# fnsysctl ls /var/run/

FGT # fnsysctl cat /var/run/https.pid

If HTTPSD does not show up, run a sniffer on FortiGate. FortiGate is responding with RST to the HTTPS request.

Check if there is admin-server-cert configured.

# config system global
# show full | grep server-cert

If it is not configured, configure it as follows:

# config sys global
     set admin-server-cert Fortinet_Factory
end

After this, try accessing FortiGate via GUI again and it should work.

Debug command:

# diagnose debug reset
# diagnose debug application httpsd -1
# diagnose debug enable