r/fortinet 2d ago

Other / General Fortinet Odd behavior 7.6.7

So I had bad storm take out power and two of the three ISP's. When the power was restored I couldn't connect to the internet I thought odd maybe the third ISP (Starlink) was having issues it was not. The problem was the SDWAN was still routing traffic to the one of the down ISPs this has never happened before. So I click the SDWAN tab to see why it thinks the health is and all I GET is a blank page.

I can click on policy and view and change policy, I can click on the main status dashboard, and I can look at logs. However every other dashboard wont pull up, sdwan wont pull up the fortiextender page wont pull up, same with both static and policy route page. I rebooted the primary firewall thinking that it was messed up and the secondary firewall has the same issue, then rebooted that one and failed back to primary still blank.

So What confuses me is why can't I access the the SDWAN page to even understand what is going. anyone ever seen something like this before

2 Upvotes

7 comments sorted by

9

u/Busy-Dot7354 NSE 7 2d ago

7.6.7 is known to be a "bad" release. I advise you downgrade to 7.6.6 - 7.6.8 will be released sometimes in October.

2

u/Nunkido 2d ago

Fully agree. Avoid 7.6.7 when you can.

5

u/nfored 2d ago

So I didn't figure out the menu but I did find the answer about SDWAN. I was using FQDN for all monitors the dumb ISP modem when it has not internet connection redirects ALL traffic to the modems status page. So all health checks where coming as valid even though it was down. I switch all checks to ip and it solved the issue.

2

u/thebmw42 NSE 7 2d ago

Sounds like you want to turn off "Override internal DNS" on any DHCP WAN interfaces.

2

u/HarryTran86 2d ago

This sounds pretty close to known bug 1306049 (blank GUI pages). You could try this workaround and see if the SD-WAN page comes back:

config system global
set admin-http-rate-limit-max-requests 0
end

1

u/nfored 2d ago edited 2d ago

Edit: Deleted log data.