Fortinet white logo
Fortinet white logo

Resolved issues

Resolved issues

The following issues have been fixed in FortiProxy 7.2.11. For inquiries about a particular bug, please contact Customer Service & Support.

Bug ID

Description

875233

Not all Security Fabric settings on Active-Passive cluster should be synchronized.

915834 HA active-passive flip: standby FortiProxy tries to reach out to FortiGuard services through HA port.

990366, 1029049

Device freezes and randomly reboots. Kernel panic observed.

991626

The GUI option for selecting a wildcard FQDN destination for IPv6 SNAT does not work properly.

997868, 1041622

Explicit FTPS does not work over SOCKS proxy.

1003723

Cannot configure heartbeat interface IP or set up unicast HA in transparent mode.

1003762

Loss of connection with no internet access and multiple crashes for the application WAD.

1008556

Webcache cannot correctly handle content-encoding conversion for Brotli and

zstd.

1011771

Traffic is sometimes not processed with UTM profiles in policy.

1017054 Traffic redirected through proxyd is blocked when the FortiProxy is in bridge mode.

1019752, 1027342

FTPS SSL handshake failure through explicit proxy.

1020556 miglogd CPU usage is constantly high.
1020788 No log is generated when a user is redirected to SAML authentication.

1020961

FortiProxy does not attempt to authenticate using the secondary Radius server when the primary is down.

1022209

"400 error!" for SAML authentication with FortiAuthenticator.

1023951 ZIP files cannot be downloaded from FortiProxy antivirus profile with an error that the archive file is corrupted.

1025061

Intermittent file uploading failure using SFTP on Winscp client after upgrade.

1025657 After upgrading, some websites are inaccessible when web cache is enabled.
1026753 No alert email for license-related logs when alertmail setting.fpx-license-logs is enabled.
1027699 FortiProxy fails with SSH message "kex type 34" when SSH server is not up-to-date.
1027833 Proxy forwarding no longer works after firmware upgrade.
1028493 Crash when you enable ha-mgmt-status in CLI and then load a backup configuration with ha-mgmt-status enabled but ha-mgmt-interfaces not configured.

1029347

ICAP profile should not be counted towards SWG license seats.

1029938 "exec ha manage" returns the "Bad vrf ' 32'" error.

1030106

VIP configured in a transparent policy affects the behavior of FTP proxy.

1031971 Memory leak for multipart boundary in http/2.
1034036 FortiManager access is lost after upgrade when central-management type is fortimanager.

1035614

Unpacked variables do not match the pack layout.

1035877, 1057116

Disable UA check for requests with FNBI token. Do not intercept HTTP requests from machines with outdated CAPP.

1036668 IPS default-action filter values do not match in GUI and CLI.

1036782

IPS sensor configuration does not filter out what is not supported.

1037299

Cache resolving issue in HA.

1037465 DNS filter profile search does not work for non-root VDOM.

1038447

FortiAnalyzer traffic is directed to the dedicated-to management interface even if the dedicated-to interface is down.

1038836

User, group, and URL category information missing in HTTP transaction log for cert-inspect HTTPS traffic.

1039033 FortiProxy sends a request to FortiGuard every 30 minutes and causes out-of-sync for a few minutes.
1041560 FortiProxy crashes after cache peer setting change.

1042226

Potential crash in wsm_read_string().

1042239, 1042382, 1039967 Cosmetic GUI issues.

1042957

Traffic logs do not show transparent policy UUID and the Packets column always shows 0.

1042975 High CPU load through ips-engine and WAD keeps crashing when the isolator profile has an empty entry.

1043778

FortiProxy cannot detect the VFIO network inteface type in OCI.

1045085 Overlapping buffer in memory copy may cause undefined behavior.
1045223, 1046283 Cannot change log disk size after Azure template deployment.

1045438

FTP connection fails through wanopt profile with FTP.

1045459 The "munmap" function is called with an incorrect argument, which can result in buffer overflow.
1046470 High CPU and WAD crashes on FPX-4000E.
1046944 Transparent policy does not support interface-subnet firewall address type.
1047542 WAD fails to forward HTTP request with header 'accept-encoding: zstd' when strip-encoding is enabled.

1047758

Website browsing is slow.

1047934 Disable ssh-rsa from SSH server host-key algorithm.

1048549

FortiProxy VM S Series serial number prefix.

1048856 No status information for hardware sensor.

1049243

Access issue after changing captive portal type.

1049784 Cannot deploy FortiProxy on ESXi 8.0 using the OVF file.
1050315 Cannot change proxy-address type in CLI when the type is referenced.

1050348

DHCP relay does not work in FortiProxy.

1052294

WAD crashes frequently with "signal 11 (Segmentation fault) received" and "signal 6 (Aborted) received".

1052991

Crash when getting eicar file with webfilter in transparent policy.

1054641

Error saying "Failed to enforce FortiOS Security Enforce mode" at FPX-400G startup.

1058198

Traffic loop caused by HA in TP mode.

FortiNBI

The following issue has been fixed in FortiNBI. For inquiries about a particular bug, please contact Customer Service & Support.

Bug ID Description
1032886,1034982 Crash during FortiNBI exit.

1053344

The "last modified" time for FortiNBI installer packages are not updated during upload.

Common vulnerabilities and exposures

FortiProxy 7.2.11 is no longer vulnerable to the following CVE references. Visit https://fortiguard.com/psirt for more information.

Bug ID

CVE reference

985048

CVE-2024-26015

1059304

CVE-2024-48886 and CVE-2024-50563

1057574

CVE-2024-47569

Resolved issues

Resolved issues

The following issues have been fixed in FortiProxy 7.2.11. For inquiries about a particular bug, please contact Customer Service & Support.

Bug ID

Description

875233

Not all Security Fabric settings on Active-Passive cluster should be synchronized.

915834 HA active-passive flip: standby FortiProxy tries to reach out to FortiGuard services through HA port.

990366, 1029049

Device freezes and randomly reboots. Kernel panic observed.

991626

The GUI option for selecting a wildcard FQDN destination for IPv6 SNAT does not work properly.

997868, 1041622

Explicit FTPS does not work over SOCKS proxy.

1003723

Cannot configure heartbeat interface IP or set up unicast HA in transparent mode.

1003762

Loss of connection with no internet access and multiple crashes for the application WAD.

1008556

Webcache cannot correctly handle content-encoding conversion for Brotli and

zstd.

1011771

Traffic is sometimes not processed with UTM profiles in policy.

1017054 Traffic redirected through proxyd is blocked when the FortiProxy is in bridge mode.

1019752, 1027342

FTPS SSL handshake failure through explicit proxy.

1020556 miglogd CPU usage is constantly high.
1020788 No log is generated when a user is redirected to SAML authentication.

1020961

FortiProxy does not attempt to authenticate using the secondary Radius server when the primary is down.

1022209

"400 error!" for SAML authentication with FortiAuthenticator.

1023951 ZIP files cannot be downloaded from FortiProxy antivirus profile with an error that the archive file is corrupted.

1025061

Intermittent file uploading failure using SFTP on Winscp client after upgrade.

1025657 After upgrading, some websites are inaccessible when web cache is enabled.
1026753 No alert email for license-related logs when alertmail setting.fpx-license-logs is enabled.
1027699 FortiProxy fails with SSH message "kex type 34" when SSH server is not up-to-date.
1027833 Proxy forwarding no longer works after firmware upgrade.
1028493 Crash when you enable ha-mgmt-status in CLI and then load a backup configuration with ha-mgmt-status enabled but ha-mgmt-interfaces not configured.

1029347

ICAP profile should not be counted towards SWG license seats.

1029938 "exec ha manage" returns the "Bad vrf ' 32'" error.

1030106

VIP configured in a transparent policy affects the behavior of FTP proxy.

1031971 Memory leak for multipart boundary in http/2.
1034036 FortiManager access is lost after upgrade when central-management type is fortimanager.

1035614

Unpacked variables do not match the pack layout.

1035877, 1057116

Disable UA check for requests with FNBI token. Do not intercept HTTP requests from machines with outdated CAPP.

1036668 IPS default-action filter values do not match in GUI and CLI.

1036782

IPS sensor configuration does not filter out what is not supported.

1037299

Cache resolving issue in HA.

1037465 DNS filter profile search does not work for non-root VDOM.

1038447

FortiAnalyzer traffic is directed to the dedicated-to management interface even if the dedicated-to interface is down.

1038836

User, group, and URL category information missing in HTTP transaction log for cert-inspect HTTPS traffic.

1039033 FortiProxy sends a request to FortiGuard every 30 minutes and causes out-of-sync for a few minutes.
1041560 FortiProxy crashes after cache peer setting change.

1042226

Potential crash in wsm_read_string().

1042239, 1042382, 1039967 Cosmetic GUI issues.

1042957

Traffic logs do not show transparent policy UUID and the Packets column always shows 0.

1042975 High CPU load through ips-engine and WAD keeps crashing when the isolator profile has an empty entry.

1043778

FortiProxy cannot detect the VFIO network inteface type in OCI.

1045085 Overlapping buffer in memory copy may cause undefined behavior.
1045223, 1046283 Cannot change log disk size after Azure template deployment.

1045438

FTP connection fails through wanopt profile with FTP.

1045459 The "munmap" function is called with an incorrect argument, which can result in buffer overflow.
1046470 High CPU and WAD crashes on FPX-4000E.
1046944 Transparent policy does not support interface-subnet firewall address type.
1047542 WAD fails to forward HTTP request with header 'accept-encoding: zstd' when strip-encoding is enabled.

1047758

Website browsing is slow.

1047934 Disable ssh-rsa from SSH server host-key algorithm.

1048549

FortiProxy VM S Series serial number prefix.

1048856 No status information for hardware sensor.

1049243

Access issue after changing captive portal type.

1049784 Cannot deploy FortiProxy on ESXi 8.0 using the OVF file.
1050315 Cannot change proxy-address type in CLI when the type is referenced.

1050348

DHCP relay does not work in FortiProxy.

1052294

WAD crashes frequently with "signal 11 (Segmentation fault) received" and "signal 6 (Aborted) received".

1052991

Crash when getting eicar file with webfilter in transparent policy.

1054641

Error saying "Failed to enforce FortiOS Security Enforce mode" at FPX-400G startup.

1058198

Traffic loop caused by HA in TP mode.

FortiNBI

The following issue has been fixed in FortiNBI. For inquiries about a particular bug, please contact Customer Service & Support.

Bug ID Description
1032886,1034982 Crash during FortiNBI exit.

1053344

The "last modified" time for FortiNBI installer packages are not updated during upload.

Common vulnerabilities and exposures

FortiProxy 7.2.11 is no longer vulnerable to the following CVE references. Visit https://fortiguard.com/psirt for more information.

Bug ID

CVE reference

985048

CVE-2024-26015

1059304

CVE-2024-48886 and CVE-2024-50563

1057574

CVE-2024-47569