Fortinet black logo

FortiManager 7.0.6 and FortiOS 7.0.11 compatibility issues

FortiManager 7.0.6 and FortiOS 7.0.11 compatibility issues

This section identifies interoperability issues that have been identified with FortiManager 7.0.6 and FortiOS 7.0.11. FortiOS 7.0.11 includes syntax changes not supported by FortiManager 7.0.6.

Note

When specific platforms are indicated, the syntax change applies to both the FortiGate and FortiCarrier platform for the model.

For example, (4 platforms: 3980E,3960E) indicates FortiGate-3980E, FortiCarrier-3980E, FortiGate-3960E, FortiCarrier-3960E.

The following objects were added:

  • (attr) endpoint-control fctems ca-cn-info

  • (attr) endpoint-control fctems trust-ca-cn

  • (node) system replacemsg custom-message

The following default values changed:

  • system interface mediatype default value changed from none to qsfp28-sr4

  • system lte-modem auto-connect default value changed from disable to enable

  • system lte-modem gps-service default value changed from disable to enable

  • system npu hash-config default value is changed depending on the platform. For more information, see the FortiOS Hardware Acceleration Guide on the Fortinet Documents Library.

Additional option changes:

system interface mediatype

option-list (tag|opt): ["cr", "cr4", "gmii", "lr", "lr4", "none", "sgmii", "sr", "sr4"] -> None (4 platforms: 3980E,3960E)

option-list (tag|opt): None -> ["qsfp28-cr4", "qsfp28-lr4", "qsfp28-sr4"] (4 platforms: 3980E,3960E)

system interface speed

option-list (tag|opt): None -> ["2500auto", "5000auto"] (36 platforms: 2200E,3301E,3980E,2601F,3501F,4200F,3500F,1800F,3600E,1100E,4401F,2201E,1801F,3300E,3400E,2600F,4201F,3601E,1101E,3960E,3401E,4400F)

system link-monitor interval

int-range (tag|lmt): 500,3600000 -> 20,3600000

system link-monitor probe-timeout

int-range (tag|lmt): 500,5000 -> 20,200

system sdwan health-check interval

int-range (tag|lmt): 500,3600000 -> 20,3600000

system sdwan health-check probe-timeout

int-range (tag|lmt): 500,3600000 -> 20,3600000

webfilter profile

tab-size (tag|tz): 20000,20000,0 -> 35000,35000,0 (16 platforms: 4200F,4401F,4201F,3601E,3980E,3600E,3960E,4400F)

webfilter urlfilter

tab-size (tag|tz): 1000,1000,0 -> 35000,35000,0 (16 platforms: 4200F,4401F,4201F,3601E,3980E,3600E,3960E,4400F)

FortiManager 7.0.6 and FortiOS 7.0.11 compatibility issues

This section identifies interoperability issues that have been identified with FortiManager 7.0.6 and FortiOS 7.0.11. FortiOS 7.0.11 includes syntax changes not supported by FortiManager 7.0.6.

Note

When specific platforms are indicated, the syntax change applies to both the FortiGate and FortiCarrier platform for the model.

For example, (4 platforms: 3980E,3960E) indicates FortiGate-3980E, FortiCarrier-3980E, FortiGate-3960E, FortiCarrier-3960E.

The following objects were added:

  • (attr) endpoint-control fctems ca-cn-info

  • (attr) endpoint-control fctems trust-ca-cn

  • (node) system replacemsg custom-message

The following default values changed:

  • system interface mediatype default value changed from none to qsfp28-sr4

  • system lte-modem auto-connect default value changed from disable to enable

  • system lte-modem gps-service default value changed from disable to enable

  • system npu hash-config default value is changed depending on the platform. For more information, see the FortiOS Hardware Acceleration Guide on the Fortinet Documents Library.

Additional option changes:

system interface mediatype

option-list (tag|opt): ["cr", "cr4", "gmii", "lr", "lr4", "none", "sgmii", "sr", "sr4"] -> None (4 platforms: 3980E,3960E)

option-list (tag|opt): None -> ["qsfp28-cr4", "qsfp28-lr4", "qsfp28-sr4"] (4 platforms: 3980E,3960E)

system interface speed

option-list (tag|opt): None -> ["2500auto", "5000auto"] (36 platforms: 2200E,3301E,3980E,2601F,3501F,4200F,3500F,1800F,3600E,1100E,4401F,2201E,1801F,3300E,3400E,2600F,4201F,3601E,1101E,3960E,3401E,4400F)

system link-monitor interval

int-range (tag|lmt): 500,3600000 -> 20,3600000

system link-monitor probe-timeout

int-range (tag|lmt): 500,5000 -> 20,200

system sdwan health-check interval

int-range (tag|lmt): 500,3600000 -> 20,3600000

system sdwan health-check probe-timeout

int-range (tag|lmt): 500,3600000 -> 20,3600000

webfilter profile

tab-size (tag|tz): 20000,20000,0 -> 35000,35000,0 (16 platforms: 4200F,4401F,4201F,3601E,3980E,3600E,3960E,4400F)

webfilter urlfilter

tab-size (tag|tz): 1000,1000,0 -> 35000,35000,0 (16 platforms: 4200F,4401F,4201F,3601E,3980E,3600E,3960E,4400F)