Issue Description
After upgrading to Fortinet FortiOS 7.4.x, inspections of Fortinet FortiGate units began failing with the following error message:
Inspection failed at https://xxxx.xxxx.xxxx:8443/api/v2/cmdb/system/interface with status code 403: Request failed with status code 403.
This error indicates a permissions issue within the FortiGate system. Units running FortiOS 7.2.x were unaffected and continued to work correctly.
Root Cause
The issue was identified as a configuration change during the upgrade from FortiOS 7.2.x to 7.4.x. Specifically:
The "Permit usage of CLI commands" setting was automatically changed from Enabled to Custom.
Trusted Hosts configuration required toggling to resolve the issue.
Resolution Steps
To resolve this issue:
Log in to the Fortinet FortiGate management interface.
Navigate to System > Settings or Administrator Settings (depending on your FortiOS version).
Locate the "Permit usage of CLI commands" setting.
Change this setting to Enabled if it is set to Custom.
Temporarily toggle the Trusted Hosts configuration:
Disable Trusted Hosts, save the configuration, and then enable it again.
Save the changes and test the connection.
Once these steps are completed, the inspection should work as expected. If you're still encountering errors, please open a ticket with our support team.