Recently, we have seen an increasing number of support cases where resellers are unable to register their newly purchased FortiGate through the GUI during the initial login, even though the device has already been registered in the FortiCloud portal.
To troubleshoot this issue, we recommend the following steps via SSH or serial console:
1. Verify Connectivity to FortiGuard Servers
execute ping update.fortiguard.net
Make sure the FortiGate can reach the update servers successfully.
2. Debug the Update and Registration Process
diagnose debug application update -1
diagnose debug enable
execute update now
This helps identify potential issues during the update process, retrieves the licenses again from FortiCloud, and has resolved the issue in multiple cases.
3. Disable Anycast (if the issue persists)
In some cases, disabling Anycast resolves the registration issue. However, you should switch it back afterward, since Anycast is the recommended option from Fortinet.
More information:
Fortiguard not reachable – Blog Boll
4. Last Resort: Disable Forced FortiCare Registration (For newer G-Models)
If the issue still persists, you can temporarily disable the enforced FortiCare registration feature.
Documentation:
Fortinet Documentation – Enforce FortiCare Registration After New GUI Login
Following these steps should help to identify and resolve most FortiGate registration issues quickly and efficiently.
