Resolved Issues
The following issues have been fixed in version 6.0.4. For inquires about a particular bug, please contact Customer Service & Support.
Antivirus
Bug ID |
Description |
---|---|
516072 |
In flow mode, |
519759 |
Process |
522343 |
|
Endpoint Control
Bug ID |
Description |
---|---|
495132 |
Automation stitch IOC for Access Layer Quarantine works incompletely. |
Explicit Proxy
Bug ID |
Description |
---|---|
521344 |
Explicit FTP proxy doesn't work with secondary IP address. |
521899 |
When proxy |
523974 |
Cannot access some web sites with deep inspection enabled. |
Firewall
Bug ID |
Description |
---|---|
390422 |
When a firewall address group is used in firewall policy, a wildcard FQDN address should not be allowed to be added into the firewall address group as a member. |
503904 |
Creating a new address group gives error: |
504057 |
Service Object Limitation of 4096 needs to be increased. |
511261 |
RSH connection disconnects when we have multiple commands executed via script and we can see the message |
514187 |
VIP ping healthchecks fail with high number of realservers. |
FortiView
Bug ID |
Description |
---|---|
256264 |
Realtime session list cannot show IPv6 session and related issues. |
453610 |
Fortiview >Policies(or Sources) >Now shows nothing when filtered by physical interface at PPPoE mode. |
460016 |
In Fortiview > Threats, drill down one level, click Return and the graph is cleared. |
461811 |
In Cloud Applications widget bubble view, the tooltip cannot display Application. |
488886 |
FortiView > Sources is unable to sort information accurately when filtering by policy ID number. |
495070 |
In FortiView > Cloud Applications > Applications, GUI keeps loading and without any response. |
527700 |
FortiView pages cannot be loaded by latest Chrome version 71.0.3578.80. |
GUI
Bug ID |
Description |
---|---|
437117 |
In Single Sign-on, multiple FSSO polling servers with the same AD (LDAP) server cannot select the same user or group. |
456289 |
GUI to support two-level device classification schema. |
491919 |
GUI - Routing Monitor page does not load with large number of routes inserted in the routing table. |
497427 |
V3.3.0_533151 remote access stuck loading main dashboard page and login with Fortimanager_Access user. |
512806 |
Slowness in loading the Addresses page. |
515022 |
FortiGate and FSA has right connectivity, but Test Connectivity on GUI interface is showing |
515983 |
Firefox cannot list user TACACS+ Servers. Chrome is OK. |
516027 |
In GUI IPsec monitor page, the column username should be peerID. |
516295 |
|
518024 |
Guest admin logging in gets GUI Error 500: Internal Server Error. |
518131 |
Cannot add static route with the same gateway IP and interface from WebGUI. |
518970 |
Suggestion to improve SD-WAN SLA creation page's invalid-entry handling. |
522576 |
GUI always loading VPN interface when there is over 5k VPN tunnel interfaces. |
526573 |
GUI Virtual IP misses SSL-VPN interface. |
HA
Bug ID |
Description |
---|---|
445214 |
Secondary unit in AP cluster memory/CPU spike as a result of DHCP/HA sync issue. |
509557 |
Duplicate MAC on mgmt2 ports. |
510660 |
Upgrade to build 3574 fails for HA cluster. |
511522 |
HA uninterruptible upgrade from 9790 to 3558 fails. |
515401 |
SLBC-Dual mode: Secondary unit chassis blade sending traffic logs. |
516779 |
Confsync cannot work with three members when encryption is enabled. |
517537 |
Secondary unit out-of-sync. Unable to log into secondary unit. |
518621 |
|
518651 |
TCP Session lost when only one unit in HA cluster kicked un-interruptive upgrade. |
519653 |
Increase FGSP session sync from 200 VDOMs to 500 VDOMs. |
525182 |
WLAN guest user in VDOM makes the cluster out of sync. |
Intrusion Prevention
Bug ID |
Description |
---|---|
469608 |
ICMP packets dropped during FortiGate update. |
476219 |
Delay for BFD in IPinIP traffic hitting policy with IPS while IPsec calculates new key. |
501986 |
DOS policy configured with action proxy for |
516128 |
Victim is quarantined after IPS attack. |
IPsec VPN
Bug ID |
Description |
---|---|
515375 |
VPN goes down randomly, also affects remote sites dialup. |
520151 |
When two certificates are configured on p1, both aren't offered or the wrong one is offered. |
Log & Report
Bug ID |
Description |
---|---|
503897 |
FortiGate-501E units generating logs only for five minutes after rebooting the unit, Then do not generate logs anymore. |
516033 |
The traffic log for WANOPT data traffic in the server-side FortiGate should show policy type as proxy-policy, not policy. |
518402 |
|
522447 |
FortiGate logging is not stable and stops working. |
522512 |
When a service group contains more than 128 services, the existing logic cannot catch it and causes buffer overflow. |
519969 |
EXE log filter category |
Proxy
Bug ID |
Description |
---|---|
477289 |
Proxy is unexpectedly sending FIN packet (FTP over HTTP traffic). |
487288 |
Facebook/LinkedIn partly loaded to browser when captive portal is used for Kerberos authorization with cookie for web proxy. |
509994 |
Web site denied due to certificate error (revoked) only in Proxy_policy and deep inspection profile. |
512434 |
Need to do changes in default replacement message of |
513270 |
Certificate error with SSL deep inspection. |
514426 |
Explicit proxy cannot catch Microsoft Outlook after FFDB update. |
516414 |
Traffic over 1GB through SCP gets terminated when SSH inspection is enabled in |
516934 |
In transparent proxy policy with cookie authentication mode, NTLM authentication doesn't work and LDAP authentication using wrong username/password will cause WAD to crash. |
519021 |
Cannot access internal CRM application server with antivirus enabled. |
521051 |
HTTP WebSocket 101 switching protocol requests mismatch in 6.0.3. |
521648 |
WAD crashes when a lot of addresses and policies are defined in the configuration. |
526322 |
WAD crashes when processing transparent proxy traffic after upgrade to 6.0.3. |
526555 |
WAD segmentation signal 11 in 6.0.3. |
REST API
Bug ID |
Description |
---|---|
467747 |
REST API user cannot create API user via autoscript upload and cannot set API password via CLI. |
Routing
Bug ID |
Description |
---|---|
441506 |
BGP Aggregate address results in blackhole for incoming traffic. |
449010 |
WAN LLB session log |
476805 |
FortiGate delays to send keepalive which causes neighbor's hold down timer to expire and reset the BGP neighborship. |
485408 |
Merge vwl_valeo project - no option for |
500432 |
IGMP multicast joins taking very long time and uses high NSM CPU utilization. |
515683 |
FortiGate generates fragmented OSPFv3 DBD packets. |
518677 |
Log message |
518929 |
SNMP, OSPF MIB ospfIfState value when designated router is not correct. |
518943 |
RIPv2 with MD5 authentication key ID incompatible with other vendors. |
520907, 520945 |
Zebos doesn't start up correctly on models using Linux 2.4 kernel. |
522258 |
Some missing fields in |
Security Fabric
Bug ID |
Description |
---|---|
515970 |
Fabric settings/widget and FortiMail icons are yellow even when they are connected. |
SSL-VPN
Bug ID |
Description |
---|---|
508101 |
HTTPS bookmark to internal website produces error after the initial successful login. |
511002 |
SSL-VPN web mode login fails when entering valid OTP manually. |
511107 |
For RADIUS with 2FA and password renewal enabled, password change fails due to unexpected state AVP + GUI bug. |
511415 |
SSL-VPN web mode RDP connection disconnects when pasting text from local to remote RDP server. |
515889 |
SSL-VPN web mode has trouble loading internal web application. |
519068 |
WAD informer process crashes in tunnel mode SSL-VPN user login. |
519372 |
SSL-VPN web mode RDP doesn't work. |
519987 |
HTTP bookmark error |
520361 |
SSL-VPN portal not loading predefined bookmarks. |
521459 |
HSTS header missing again under SSL-VPN. |
Switch Controller
Bug ID |
Description |
---|---|
522457 |
After a physical port of FortiLink LAG has link down/up, |
System
Bug ID |
Description |
---|---|
502651 |
Inconsistent behavior with 1G copper transceivers on 3960E. |
503318 |
Accessing FDS via proxy server without DNS resolution. |
505468 |
Incorrect SNMP answer for |
505522 |
Intermittent failure of DHCP address assignment. |
505873 |
|
507518 |
Partial configuration loss after root VDOM restore. |
508285 |
After restoring a config for VDOM, the VDOM cannot be deleted unless OS is rebooted. |
510737 |
Users are not able to pull DHCP addresses from FGT. |
511851 |
Unable to set EMAC VLANs on different VDOMs to the same VLAN ID. |
512930 |
WAD crash with signal 11. |
513156 |
Packet loss on startup when interfaces are in bypass mode (2500E). |
513339 |
Finisar FCLF8521p2BTL (FG-TRAN-GC) and (FS-TRAN-GC) FCLF8522P2BTL transceivers not detected by FortiOS. |
513663 |
FG-3200D running FOS 5.6.5 – WAD crashing frequently. |
516105 |
Daylight Saving Time no longer used in Azerbaijan. |
516783 |
DSA and RSA fingerprints are identical. |
524422 |
Support FortiGateRugged-30D model containing the new CPU. |
Upgrade
Bug ID |
Description |
---|---|
510447 |
FWF-30D keeps rebooting after upgrade to 6.0.2. |
User & Device
Bug ID |
Description |
---|---|
463849 |
FAC remote LDAP user authentication via RADIUS fails on invalid token if password change and 2FA are both required. |
491118 |
Kerberos users unable to access internet. |
510581 |
Backup password for LDAP admin does not work when interface is down. |
511776 |
Once user has assigned token other tokens not listed in pull down menu. |
515226 |
FortiGate keeps sending accounting packet to RADIUS server for user that is no longer authenticated. |
519826 |
|
VM
Bug ID |
Description |
---|---|
488964 |
Service Manger warns that internal and external interfaces are down. |
498653 |
FortiOSVM stops passing traffic after failover. |
509672 |
"netx request error:60..." was reported when running some "exec nsx service" and "exec nsx group" commands on SVM. |
512713 |
Connectivity loss between FGT-SVM and FGT-VMX causes license to became invalid after one hour. |
515624 |
FortiGate VM cannot use the maximum memory allowance as per the license. |
524852 |
Possible cross-origin error when attempting to read state from window.opener for GCP marketplace. |
VoIP
Bug ID |
Description |
---|---|
516927 |
No audio when call is generated from the outside in a FGT30E SIP-ALG when local devices apps register against remote SIP server. |
Web Filter
Bug ID |
Description |
---|---|
486171 |
The "Web Rating Overrides" doesn't work with flow-mode. |
518933 |
Certificate inspection (CN base) web category filter doesn't work. |
523804 |
Enabling safe search on DNS causes any site with google in the domain to redirect to forcesafesearch.google.com. |
WiFi Controller
Bug ID |
Description |
---|---|
478594 |
|
503106 |
Remote site client connected to the FAP14C ethernet port is randomly not able to reach the LAN client connected to the FortiGate. |
512606 |
FortiWiFi not working with FortiPresence Pro. |
519321 |
FWF-50E kernel panic due to a WiFi driver issue. |
520521 |
|
522762 |
Frequent |