Resolved Issues
The following issues have been fixed in FortiManager version 7.2.11. To inquire about a particular bug, please contact Customer Service & Support.
Device Manager
|
Bug ID |
Description |
|---|---|
| 1000101 | FortiManager fails to retrieve certificates that were directly imported into the FortiGate. As a result, FortiManager repeatedly attempts to push a CSR, leading to installation status conflicts. |
| 1119280 | Firmware Template assignment does not work properly. |
|
1122481 |
When a FortiGate HA failover occurs, making any configuration changes on the FortiGate HA may cause FortiManager to attempt to purge the firewall policies on the device during the installation (Install Device Settings (only)). |
| 1124171 |
FortiManager retrieves the device configuration from the ZTP FortiGate after the image upgrade is performed, due to the 'Enforce Firmware' feature. This action erases all settings in the device database on the FortiManager side, and as a result, AutoLink installation will not be completed successfully. |
| 1124431 | Installation failure due to 'sslvpn os check' syntax error. |
| 1126321 | When creating a VLAN with "LAN" Role, an object is created even if "Create Address Object Matching Subnet" is disabled. |
| 1128094 | After upgrading to v7.2.10, the entries under Network Monitor > Routing (Static & Dynamic) no longer appear. |
Others
|
Bug ID |
Description |
|---|---|
| 1114809 |
After upgrading the FMG using the "Upgrade Image via FortiGuard" feature, the FortiManager JSON API login may fail, leading to service disruptions. This issue is important for FortiPortal and other FortiManager API clients. |
Policy and Objects
|
Bug ID |
Description |
|---|---|
| 1073463 | Installation is failed with error, "VIP entry cannot be moved when central-nat is disabled." |
| 1101436 | The "sni-server-cert-check" cannot be disabled on SSL-SSH inspection profile for "ftps" "pop3s" and "smtps". |
| 1113129 | FortiManager is treating implicit-deny local-in policy incorrectly, denying any traffic. |
Services
|
Bug ID |
Description |
|---|---|
| 1104925 |
FortiManager in Cascade mode may fail to display accurate license information/contracts for FortiGate retrieved from the FDS server, as it is not listed in the FortiGate authlist. |
VPN Manager
|
Bug ID |
Description |
|---|---|
| 1084696 |
If users reopen the IPsec Tunnel template and close it without making any changes, FortiManagermight still display the following error message in the install log: "Error: VPN IPsec phase1-interface psksecret...Minimum psksecret length is 6..." |
Common Vulnerabilities and Exposures
Visit https://fortiguard.com/psirt for more information.
| Bug ID | CVE references |
|---|---|
|
1129438 |
FortiManager 7.2.11 is no longer vulnerable to the following CVE Reference:
|
|
1172235 |
FortiManager 7.2.11 is no longer vulnerable to the following CVE Reference:
|
|
1180568 |
FortiManager 7.2.11 is no longer vulnerable to the following CVE Reference:
|