New features or enhancements

FortiExtender 7.6.5 offers the following new features and enhancements:

• Add support for null encryption (null-sha1 and null-sha256) when configuring IPsec VPN Phase 2 interface (Standalone).

• Support IPv6 prefix delegation with SLAAC (Standalone).

• Revamp the FortiExtender GUI with a new layout (Standalone).

• Add support for IPv6 IPsec VPN, including IPv6 transport, Phase 2 traffic selectors, and dual-stack support (Standalone).

• Add support for configuring DHCP6 servers on physical, switch, and Wi-Fi LAN interfaces (Standalone).

• Add support for IPv6 on Wi-Fi LAN and Wi-Fi WAN interfaces (Standalone).

• Add support for IPv6 when configuring SNMP hosts (Standalone).

• A limited number of SNMP Object Identifiers (OIDs) have been updated.

• The data types of a few OIDs have been adjusted to ensure full consistency between the MIB definitions and the values returned by the FortiExtender.

• Add support for IPv6 when configuring a redirect portal IP (Standalone).

• Wi-Fi LAN mode now supports IPv6 for both the RADIUS authentication server and the Source IP address used for communication with the RADIUS server in WPA2 and WPA3 Enterprise security modes (Standalone).

• Captive portals now support IPv6 captive portal servers and IPv6 security exempt lists (Standalone).

• Add a login timeout period when accessing a FortiExtender device via SSH. After five failed login attempts, there will be a ten minute temporary lockout period before the user is allowed to try again (Standalone).

• Improve LTE/5G service quality in FER-511G and FEV-511G models by adding an option to offload traffic to a dedicated coprocessor when operating in local NAT mode (Standalone).

• Add support for Assisted GPS (A-GPS) on all G-series FortiExtender models.

  Note: On FEX-511G and FEX-511G-WiFi , the APN must be configured before the A-GPS feature can work.

• Add support for saving OBM console log outputs to a local USB or a remote FTP, SFTP, SMB, or NFS server (Standalone).

• Add support for CHAP authentication with order of APNs when configuring multiple Packet Data Networks (PDN) (Managed).

  Note: This feature is dependent on whether the ISP also supports it.