Getting 'Error importing OVF' error when importing FAZ or FMG VM's in VMware Workstation

Every time I try to open an OVF of a FortiAnalyzer or FortiManager on VMWorkstation running on Linux Mint I get the following error:

Error importing OVF: Invalid target disk adapter type: pvscsi

Fortunately the fix for this is easy. Simply edit the .ovf file of the image you're trying to import and change the following highlighted value:

  <rasd:ResourceSubType>VirtualSCSI</rasd:ResourceSubType>

to this:

  <rasd:ResourceSubType>lsilogic</rasd:ResourceSubType>


Save the file and re-import the OVF and it should work now.

Getting iprope_in_check() errors when routing is configured correctly

I was working on a FG90D for a customer a while back and had just finished configuring some extra routes, but no traffic was passing through the device.

Using the 'diag debug flow' command I was seeing the below message:

id=36870 pri=emergency trace_id=8 msg="iprope_in_check() check failed, drop"

This usually means a packets arrived where no forwarding or return routes exist, so the firewall drops it.

Knowing this I double (and triple!) checked the routes and routing table, and confirmed that everything was correct.

So having confirmed it's configured correctly, the could only assume that the routing table hasn't been refreshed when I added the new routes. This is something that's done automatically on the firewall when a change is made to the routing table (ex: a route has been added/deleted, interface up/down etc) but for some reason wasn't happening.

Using the below command I flushed the routing table and forced it to refresh:

diagnose firewall iprope flush

After that, the traffic is now routing correctly! :)