Known Issues
The following issues have been identified in 7.4.1. To inquire about a particular bug or to report a bug, please contact Customer Service & Support.
AP Manager
|
Bug ID |
Description |
|---|---|
| 884233 | FortiManager displays the AP critical security vulnerability info even after FortiAPs are being upgraded. |
|
906061 |
It takes a significant amount of time to assign a profile to each FortiAPs. |
|
974444 |
DNS server for SSIDs gets resets after importing AP Profile. |
Device Manager
|
Bug ID |
Description |
|---|---|
| 811104 | Import policy package fails after installing web-proxy through CLI configurations. |
|
880934 |
FortiManager reverts Syslog mode settings on local FortiGates (when FortiGates are in FIPS mode). |
|
902577 |
The status of the FortiLink split-interface radio button under FortiManager's Device Manager does not match the configuration in FortiGates. |
|
920394 |
Installation failed due to the incorrect install order during ZTP. |
| 935586 | When managed devices go down/appear offline, not all FGFM tunnels are automatically recovered by FortiManager. |
|
936168 |
Unable to assign Device Group to the Firmware Template. |
|
939921 |
The firmware upgrade in ADOM mode backup is not allowed. |
|
947393 |
When adding a device via CSV file import, not all metadata values may be configured successfully if a variable is not used in any provisioning templates within the blueprint. |
|
948475 |
"View Diff" function under the Device Manager > Device Configuration DB per device does not function properly. |
| 949546 | When assigning interfaces to a zone in a vdom, it is not visible in Device Manager. |
| 949612 | The SD-WAN monitor table-view takes too long to load/display information. |
| 952404 | FortiManager cannot install the Static Route config under the Provisioning Template due to a static route template error after upgrading to FortiManager 7.2.4/7.4.1. |
| 954610 | FortiManager does not show objects under the 'named address' options in Ipsec VPN Phase 2 definitions. |
| 956567 | Not able to edit/delete Logging Devices Group. |
| 961447 |
After upgrading FortiManager to versions 7.2.4 or 7.4.1, devices may not be able to be retrieved or refreshed. FortiManager displays an error message related to license limits: "liclimit1|110|liclimit2|110|liclimit3|1|liclimit4." |
|
966118 |
FortiManager tries to purge all entries under table "system global split-port-mode" for its System Template . |
|
969542 |
Sometimes the IPsec Tunnel Template displays the "Response with errors" message when editing the template. |
FortiSwitch Manager
|
Bug ID |
Description |
|---|---|
| 940419 | When adding FortiSwitch on FortiManager, error message "Import error - invalid port number" is displayed. |
|
958072 |
The "view ports" feature under the Managed FortiSwitches of the FortiSwitch Manager does not display the ports. |
|
966726 |
When viewing switch ports through the FortiSwitch manager, the port status was displayed as "down". |
|
967213 |
While attempting to deploy a FortiSwitch template to a model device, FortiManager generates the following error message: "VLAN interface does not match FortiLink." |
Global ADOM
|
Bug ID |
Description |
|---|---|
| 969182 | Under the Global ADOM, the assignment of specific policy packages does not function properly. |
Others
|
Bug ID |
Description |
|---|---|
|
583349 |
FortiManager does not provide support for image upgrades on "ONDEMAND" devices. |
|
796858 |
Subject Key Identifier extension is missing on FortiManager ADOM CA certificate. |
| 875584 | FortiManager cannot upgrade ADOMs to 7.2 due to error "copy system replacemsg spam.smtp-spam-emailblock". |
| 900512 | FortiManager ADOM Upgrade fails with the error message, "Peer type cannot be peer when authentication method is pre-share key". |
| 922957 | the "fmgd" process may crash while loading the ADOM when multiple Policy Packages are locked. |
| 937448 | Unable to change the time zone on ADOM when FortiAnalyzer feature is enabled on FortiManager. |
| 941203 | FortiManager does not support the use of Certificate Templates to create certificates with a "range=global" setting for FortiGates operating in multi-vdom mode. |
|
957433 |
When creating the FortiManager/FortiAnalyzer docker instances, UUID is missing under the " |
|
960796 |
FortiExtenders are not displayed under the FortiExtender Manager for all FortiGates. |
|
963490 |
Installation fails as FortiManager attempts to " |
|
971122 |
FortiManager does not support all authentication types that are supported by FortiOS, leading to a certificate error in the FortiClient EMS connector. |
Policy & Objects
|
Bug ID |
Description |
|---|---|
| 630648 | A FortiManager instance running on Microsoft Azure is unable to import the SDN connector for a dynamic firewall address and is displaying an error message stating "wrong input parameter." |
|
725427 |
Policy package install skips the policy where destination interface is set as SD-WAN zone and policy is IPSEC policy. |
| 751443 |
FortiManager displays policy installation copy failures error when ipsec template gets unassigned. Workaround: Instead of unassigning IPSec template, modify IPSec template, replace the reference to IPSec tunnel interface with another interface. Please ensure a fresh FMG backup is created prior to any changes. |
| 845022 | SDN Connector failed to import objects from VMware VSphere. |
| 854359 | An installation error occurs
when FortiManager attempts to install wildcard FQDN addresses 'mzstatic-apple' and
'cdn-apple' within the 'custom-deep-inspection' SSL-SSH profile. |
| 855073 | The "where used" feature does not function properly. |
|
875103 |
Local categories gets purged if used in Profile Mode Security Profiles. |
|
899226 |
Unable to create Central SNAT explicit port translations on FortiManager. |
| 900229 | In policy-based policy packaged, application IDs are displayed instead of their names. |
| 904751 | WebRating overrides can't be deployed or deleted via FortiManager. |
|
905377 |
Threat Feeds with name starting with 'g-' do not installed to FortiGates without VDOM enabled. |
|
907925 |
IPS profile/Signature tab is not visible for admins with non-default admin profile. |
|
938019 |
Policy Package status not changed on modification of nested group used in Policy Block. |
| 939979 | After editing authentication-rule/portal mapping, FortiManager installs unexpected changes to these rules. |
|
942659 |
Syncing EMS tags from FortiManager fails when the EMS Connector is configured in multi-site mode. |
| 943386 | The installation failed with the message: "auto-firmware-upgrade-day is overridden by auto-firmware-upgrade-delay for automatic patch-level firmware upgrades from FortiGuard." |
| 945632 | Modifying the Policy Installation Target does not trigger a status change in the Policy Package when adding an "install on" to a single policy. |
|
945853 |
FortiManager doesn't sync previously deleted EMS tags. |
| 948437 | When adding a filter under Application Control, it results in a display of apps with messy names and icons. |
|
948559 |
Policy Blocks doesn't load properly. |
|
948980 |
After creating a new v7.4 ADOM, clicking on the "Show Global Object Search" displays empty page. |
| 949515 | Security Policy Installation
Verification fails because the "internet-service-negate" feature gets enabled
every time after modifying the policy. |
|
949972 |
Filter isn't working when trying to add a device as an Installation target for an existing policy package. |
|
954399 |
Cloning Webfilter profiles does not save the FortiGuard Category Based Filter action. |
| 957225 | ADOM admin users not able to view the managed FortiGate in the policy push wizard. |
| 958923 | Installing policy packages that utilize an SSL/SSH Inspection profile may fail with the error message, "Server certificate replace mode cannot support category exempt." |
|
959166 |
Export to Excel does not work. |
| 960778 | Installation failed because FortiManager attempts to remove a static entry, "QuarantinedDevices." |
| 964464 | Policy Lookup feature does not function. |
|
965670 |
Creating a new interface type 'vlan'; changing VDOM results in the removal of the selected interface. |
|
978814 |
When attempting to use the Export to Excel feature under the Firewall Policy with extensive rules, GUI may slow down and become unresponsive for some time. |
Revision History
|
Bug ID |
Description |
|---|---|
|
513317 |
FortiManager may fail to install policy after FortiGate failover on Azure. |
| 801614 | FortiManager might display an error message "Failed to create a new revision." for some FortiGates, when retrieving their configurations. |
|
894523 |
Object revision timestamp is taken from previous revision. |
Script
|
Bug ID |
Description |
|---|---|
| 937528 | Unable to send DHCP options "set value" using CLI template and using Script. |
Services
|
Bug ID |
Description |
|---|---|
| 863094 | The query status is not functioning correctly, and the "top 10 unrated sites" section actually displays ratings. |
|
938365 |
FortiManager's GUI does not display an option under FortiGuard Settings to support the 7.2 version for FortiClient and FortiMail. |
|
985074 |
Changing the FortiGuard Server Location under the license info widget results in a blank page popup. |
System Settings
|
Bug ID |
Description |
|---|---|
| 825319 | FortiManager fails to promote a FortiGate HA member (running on firmware 7.2.0 to 7.2.4) to the Primary. |
|
871633 |
The configuration that is not synchronized among HA members cannot be modified on secondary devices. |
| 930200 | Unable to change the time and timezone from the GUI. |
|
930449 |
Testing the syslog server displays the message "Failed to send a test log to syslog server". |
|
936694 |
After removing a device, FortiManager generates repeated "sync dvmdb to faz" tasks for all logged-in administrative users. |
| 941082 | A password prompt is consistently requested with each new login attempt when applying password policies to a local account linked to FortiToken Cloud Mobile for multi-factor authentication (MFA). |
|
957308 |
After enabling FortiAnalyzer feature the new Event Logs are not displayed in Event Log under the System Settings. |
|
962476 |
Restricted Admin users cannot Install Web Filter, IPS, and Application Control profile to FortiGates. |
| 966148 | RADIUS remote users are unable to successfully install changes to FortiGates. |
VPN Manager
|
Bug ID |
Description |
|---|---|
|
897574 |
Address Objects with Meta Variables do not function correctly when creating Static routes using the VPN Manager. |
| 906097 |
VPN Manager IPsec community Phase 2 encryption setting can't be changed to AES256GCM from the GUI. |