Fortinet white logo
Fortinet white logo

Resolved issues

Resolved issues

The following issues have been fixed in FortiProxy 7.0.18. For inquiries about a particular bug, please contact Customer Service & Support.

Bug ID Description
1026753 No alert email for license-related logs when alertmail setting.fpx-license-logs is enabled.
1017054 Traffic redirected through proxyd is blocked when the FortiProxy is in bridge mode.
1034036 FortiManager access is lost after upgrade when central-management type is fortimanager.
1025657 After upgrading to 7.0.17, some websites are inaccessible when web cache is enabled.
1027833 Proxy forwarding no longer works after firmware upgrade.
1027699 FortiProxy fails with SSH message "kex type 34" when SSH server is not up-to-date.
1020556 miglogd CPU usage is constantly high.
1025697 newcli crash on "diag wad filter process-id-by-src" command.
949464, 982553 WAD memory leak causing the FortiProxy to enter conserve mode randomly.
1025600 Transparent policy allows other source IP addresses that are not defined as the source and ISDB destination.

913703

WAD processes are stuck in D state.

1021196 SAML authorization does not use user-info when ldap-user-cache is enabled.
1023713 TLS decode error when generating traffic with eicar.txt by SMTP.
1014477 File uploads on webmail applications fail when antivirus, app control, or IPS is enabled on the explicit proxy policy.
1041560 FortiProxy crashes after cache peer setting change.
1046470 High CPU and WAD crashes on FPX-4000E.
915834 HA active-passive flip: standby FortiProxy tries to reach out to FortiGuard services through HA port.

1020961

FortiProxy does not attempt to authenticate using the secondary Radius server when the primary is down.

1023121

Certificate tab keeps loading after you select the certificate.

1040742

The System > Settings page does not load properly in GUI.

991626

The GUI option for selecting a wildcard FQDN destination for IPv6 SNAT does not work properly.

1025061

Intermittent file uploading failure using SFTP on Winscp client after upgrading to 7.0.16.

1003723

Cannot configure heartbeat interface IP or set up unicast HA in transparent mode.

1042226

Potential crash in wsm_read_string().

1038447

FortiAnalyzer traffic is directed to the dedicated-to management interface even if the dedicated-to interface is down.

962137

HTTP CONNECT requests should not be redirected during cert-based authentication.

1048791

GUI issues.

1046944

No interface-subnet address type support for transparent policy.

1047934

ssh-rsa should be disabled under the SSH server_host_key_algorithm.

1031971

Memory utilization gradually increases with multipart boundary request.

1045459

Buffer overflow caused by the "munmap" function.

1043778

FortiProxy cannot detect the VFIO network inteface type in OCI.

997868, 1041622

Explicit FTPS does not work over SOCKS proxy.

Common vulnerabilities and exposures

FortiProxy 7.0.18 is no longer vulnerable to the following CVE reference. Visit https://fortiguard.com/psirt for more information.

Bug ID

CVE reference

1059304

CVE-2024-48886 and CVE-2024-50563

Resolved issues

Resolved issues

The following issues have been fixed in FortiProxy 7.0.18. For inquiries about a particular bug, please contact Customer Service & Support.

Bug ID Description
1026753 No alert email for license-related logs when alertmail setting.fpx-license-logs is enabled.
1017054 Traffic redirected through proxyd is blocked when the FortiProxy is in bridge mode.
1034036 FortiManager access is lost after upgrade when central-management type is fortimanager.
1025657 After upgrading to 7.0.17, some websites are inaccessible when web cache is enabled.
1027833 Proxy forwarding no longer works after firmware upgrade.
1027699 FortiProxy fails with SSH message "kex type 34" when SSH server is not up-to-date.
1020556 miglogd CPU usage is constantly high.
1025697 newcli crash on "diag wad filter process-id-by-src" command.
949464, 982553 WAD memory leak causing the FortiProxy to enter conserve mode randomly.
1025600 Transparent policy allows other source IP addresses that are not defined as the source and ISDB destination.

913703

WAD processes are stuck in D state.

1021196 SAML authorization does not use user-info when ldap-user-cache is enabled.
1023713 TLS decode error when generating traffic with eicar.txt by SMTP.
1014477 File uploads on webmail applications fail when antivirus, app control, or IPS is enabled on the explicit proxy policy.
1041560 FortiProxy crashes after cache peer setting change.
1046470 High CPU and WAD crashes on FPX-4000E.
915834 HA active-passive flip: standby FortiProxy tries to reach out to FortiGuard services through HA port.

1020961

FortiProxy does not attempt to authenticate using the secondary Radius server when the primary is down.

1023121

Certificate tab keeps loading after you select the certificate.

1040742

The System > Settings page does not load properly in GUI.

991626

The GUI option for selecting a wildcard FQDN destination for IPv6 SNAT does not work properly.

1025061

Intermittent file uploading failure using SFTP on Winscp client after upgrading to 7.0.16.

1003723

Cannot configure heartbeat interface IP or set up unicast HA in transparent mode.

1042226

Potential crash in wsm_read_string().

1038447

FortiAnalyzer traffic is directed to the dedicated-to management interface even if the dedicated-to interface is down.

962137

HTTP CONNECT requests should not be redirected during cert-based authentication.

1048791

GUI issues.

1046944

No interface-subnet address type support for transparent policy.

1047934

ssh-rsa should be disabled under the SSH server_host_key_algorithm.

1031971

Memory utilization gradually increases with multipart boundary request.

1045459

Buffer overflow caused by the "munmap" function.

1043778

FortiProxy cannot detect the VFIO network inteface type in OCI.

997868, 1041622

Explicit FTPS does not work over SOCKS proxy.

Common vulnerabilities and exposures

FortiProxy 7.0.18 is no longer vulnerable to the following CVE reference. Visit https://fortiguard.com/psirt for more information.

Bug ID

CVE reference

1059304

CVE-2024-48886 and CVE-2024-50563