Resolved issues
The following issues have been fixed in FortiProxy 7.4.7. For inquiries about a particular bug, please contact Customer Service & Support.
|
Description |
Bug ID |
|---|---|
| 1087908 | No authentication popup when ldap-user-cache is enabled. |
| 1084141 | Cannot establish signature authmethod with IPsec. |
| 1090073 | Incorrect product name in the readme file of VMWare .ovf.zip. |
|
1073651 |
"dot.quic" in no-inspection profile is not updated to bypass when the FortiProxy is first installed. |
| 1088776 | Digest auth crash. |
| 1088339 | Webfilter not blocking static URL list if 204 response is enabled. |
| 1020828 | WAD HTTP2 Stream Error when client send a small concurrent stream and make multiple concurrent requests. |
|
1088412 |
No URL in the auth failed event log. |
|
1088519 |
WAD does not check BOTNET when inline IPS is disabled. |
|
1083357 |
Application Control does not block SharePoint upload. |
| 1083359 | Missing client IP in denied explicit forward traffic log. |
|
1093624 |
Proxy regular expression and wildcard local URL filter pattern issues. |
|
1091016 |
Config-sync HA cluster is out of sync after upgrade due to "authentication.setting.update-time". |
|
1087486 |
ICAP client does not do URI encoding when converting FTP to HTTP. |
|
537134 |
Session is not terminated after web-filter quota is reached. |
| 1018780, 1023127 | WAD crash on wad_http_avscan_comfort. |
| 978602, 1066078, 1066567 | Inline IPS and IPS engine redirection issues. |
|
1089193 |
FortiProxy failed to communicate with RADIUS server that lacks message-authenticator support. |
| 1083188, 1089697 | Proxy AV does not generate infected-URL cache entry if the first request is HTTP/2. |
|
1078395 |
Upgrade libnetfilter_conntrack to include the coverity fixes. |
|
1092324 |
Randomly the auth portal is not displayed in the secondary. |
|
1095945 |
Cannot reset one of the scanunit debugs, which permanently floods the CLI with output. |
|
1085179 |
Channel video cannot be blocked by proxy-inline-ips scan when user directly visits the video by URL. |
|
1093671 |
Policy route with port configured causes IP tables failure. |
| 1091669 | CMDBError with Active-Passive config and Management Interface Reservation per WebUI |
|
1094396 |
session-sync-dev is unsupported and should be hidden in CLI. |
|
1005867, 1087631 |
AV scan does not work for archived msoffice, msofficex and 7z files. |
|
1096348 |
Unexpected logs are generated for the known applications when the logging is disabled in application profile. |
|
1093923 |
WAD crash caused by NULL webfilter profile when cmdb having issue. |
|
1082378 |
The counter of bytes shows 0 after SOCKS traffic matched the policy. |
|
1096450 |
WAD process crashes continuously. |
|
1094717 |
Root CA certificate should be filtered out for option ssl-cert under web-proxy global. |
|
1099891 |
firewall.address type wildcard does not support non-contiguous masks. |
|
933225 |
Unexpected message during link monitor deamon start. |
|
1097384 |
FortiProxy SOCKS policy-matching is case-sensitive while case-sensitivity is disabled globally. |
|
1083925 |
When captive portal is set to FQDN, it fails to match due to FQDN case sensitivity. |
|
1070388 |
FortiProxy does not respond to an ICMP request from directly connected interfaces. |
|
1101390 |
Proxy-address host address config update does not take effect. |
|
1100611 |
VMware kernel panic does not log to console. |
|
1096705 |
With inline-IPS enabled, no SNMP traps are generated when an IPS signature is detected. |
|
1096290 |
WAD crash at wad_log_http_transaction. |
|
1103545 |
Serverlo ad balance VIP in policy causes IP tables failure. |
|
1097877 |
The license sharing widget does not show the purchased license seats of temporarily disconnected members that are still within the 8-hour grace period. |
|
1103035 |
No backward-compatibility for license sharing. |
|
1099324 |
"fpx_snat_pick_ip" related kernel messages in crashlog. |
|
1099850 |
WAD crashes when it tries to initialize a QUIC listener on a port that has been already assigned to another UDP listener in another daemon (e.g. DNS proxy). |
|
1102477 |
Unable to download PAC file in PAC policy. |
|
1095866 |
WAD not responding to clients with error when SMB uploads are blocked. |
|
1101083 |
WAD app-based policy crash. |
|
1074493 |
Some HTTP Transaction logs do not contain category and category description when webfilter is enabled. |
|
1088866 |
Uploading of password-protected archive files is blocked. |
|
1100906 |
Source NAT shows 0.0.0.0 in the logs. |
|
1103421 |
Inline IPS does not block PDF as expected. |
|
1103965 |
Fails to create local certificate file. |
|
1096728 |
Continuous WAD crashing on Azure which affects some VIP traffic. |
|
983997, 1099574 |
Failed to validate two different CAs with the same subject and issuer. |
|
1085418 |
Content analysis filename shows "Image Cache Was Cleared". |
|
1103110, 1106077, 1094526, 1105757 |
GUI issues. |
|
1105731 |
Add connection timeout and its handler in wad_p2s_http_sesmodule. |
Common vulnerabilities and exposures
FortiProxy 7.4.7 is no longer vulnerable to the following CVE reference. Visit https://fortiguard.com/psirt for more information.
|
Bug ID |
CVE reference |
|---|---|
|
1092960, 1093060 |