Fortinet black logo

CLI Reference

diagnose debug module wassd

diagnose debug module wassd

Use this command to set the wassd debug log level. When you enable debug, the output will reflect the debug log level set with diagnose debug module wassd command.

The wassd daemon forms the connection between FortiADC and FortiWeb Cloud and performs several integral functions when AI Threat Analytics is enabled. This includes the following:

  • Establishing a web socket connection with the FortiWeb Cloud using a token. The wassd identifies whether a CA exists before registering to the FortiWeb Cloud. If a CA does exist, then the wassd will send the issue date of the CA certificate to the FortiWeb Cloud.

  • Updating FortiWeb Cloud with FortiADC configuration changes, such as HA status changes, member updates, or mode modification.

  • Updating device certificates received from the FortiWeb Cloud. If wassd registered to the FortiWeb Cloud without the issue date of the CA or that the certificate has expired, then FortiWeb Cloud will send new certificates (including the certificate, key, and CA) to wassd. The wassd will update to the local certificate and CA table, and register to FortiWeb Cloud again with the latest CA issue date.

  • Starting the forwarding of FortiADC attack logs to FortiWeb Cloud. If wassd has successfully registered to FortiWeb Cloud, then it will start the action with the log server and port from the FortiWeb Cloud.

Note:

The wassd daemon is create for AI Threat Analytics and executes the wassd_ws Python script when AI Threat Analytics is enabled. The backend log for the Python script is stored in /var/log/wassd.log.

Syntax

diagnose debug module wassd {show | all}

diagnose debug module wassd {error | info | debug}|{set | unset}

show

Shows the wassd debug switch status.

all

Set the debug switch status to all option to on.

error

Turn on/off the wassd debug switch for errors logged in the wassd. If the error debug switch status is on, when you print all wassd debug information, the output will include wassd errors.

info

Turn on/off the wassd debug switch for general information logged about wassd system operations. If the info debug switch status is on, when you print all wassd debug information, the output will include wassd general system operation information.

debug

Turn on/off the wassd debug switch for detailed information about wassd that can be used to troubleshoot unexpected behavior. If the debug debug switch status is on, when you print all wassd debug information, the output will include wassd debug logs.

set

Set the debug switch on.

unset

Set the debug switch off.

Example

FortiADC-VM # diagnose debug module wassd show
wassd debug switch status:
error is off
debug is off
info is off

FortiADC-VM # diagnose debug module wassd all

FortiADC-VM # diagnose debug module wassd show
wassd debug switch status:
error is on
debug is on
info is on
FortiADC-VM # diagnose debug module wassd error
set	Set switch on.
unset	Set switch off.

diagnose debug module wassd

Use this command to set the wassd debug log level. When you enable debug, the output will reflect the debug log level set with diagnose debug module wassd command.

The wassd daemon forms the connection between FortiADC and FortiWeb Cloud and performs several integral functions when AI Threat Analytics is enabled. This includes the following:

  • Establishing a web socket connection with the FortiWeb Cloud using a token. The wassd identifies whether a CA exists before registering to the FortiWeb Cloud. If a CA does exist, then the wassd will send the issue date of the CA certificate to the FortiWeb Cloud.

  • Updating FortiWeb Cloud with FortiADC configuration changes, such as HA status changes, member updates, or mode modification.

  • Updating device certificates received from the FortiWeb Cloud. If wassd registered to the FortiWeb Cloud without the issue date of the CA or that the certificate has expired, then FortiWeb Cloud will send new certificates (including the certificate, key, and CA) to wassd. The wassd will update to the local certificate and CA table, and register to FortiWeb Cloud again with the latest CA issue date.

  • Starting the forwarding of FortiADC attack logs to FortiWeb Cloud. If wassd has successfully registered to FortiWeb Cloud, then it will start the action with the log server and port from the FortiWeb Cloud.

Note:

The wassd daemon is create for AI Threat Analytics and executes the wassd_ws Python script when AI Threat Analytics is enabled. The backend log for the Python script is stored in /var/log/wassd.log.

Syntax

diagnose debug module wassd {show | all}

diagnose debug module wassd {error | info | debug}|{set | unset}

show

Shows the wassd debug switch status.

all

Set the debug switch status to all option to on.

error

Turn on/off the wassd debug switch for errors logged in the wassd. If the error debug switch status is on, when you print all wassd debug information, the output will include wassd errors.

info

Turn on/off the wassd debug switch for general information logged about wassd system operations. If the info debug switch status is on, when you print all wassd debug information, the output will include wassd general system operation information.

debug

Turn on/off the wassd debug switch for detailed information about wassd that can be used to troubleshoot unexpected behavior. If the debug debug switch status is on, when you print all wassd debug information, the output will include wassd debug logs.

set

Set the debug switch on.

unset

Set the debug switch off.

Example

FortiADC-VM # diagnose debug module wassd show
wassd debug switch status:
error is off
debug is off
info is off

FortiADC-VM # diagnose debug module wassd all

FortiADC-VM # diagnose debug module wassd show
wassd debug switch status:
error is on
debug is on
info is on
FortiADC-VM # diagnose debug module wassd error
set	Set switch on.
unset	Set switch off.