Upon upgrading to FortiOS 6.2.6, a device with IPsec configured may experience IKE process crashes when any configuration change is made or an address change occur on a dynamic interface. Packets for the existing session are still forwarded via the old tunnel after the routing changed on the ADVPN hub. Static routes added by iked in non-root VDOM are not removed when tunnel interface status is set to down by configuration change. When an offloaded IPsec SA uses NP6 reserved space, it gets stuck and packets on the tunnel start to drop. IPS is constantly crashing, and ipshelper has high CPU when IPS extended database has too many rules (more than 256) sharing the same pattern.
HA is not syncing after upgrading to 6.2.5 due to failure to bind socket. Secondary device failed to sync with primary device when FGSP is peer configured, but hasync fails to bind socket. Intermittent GUI process crash if a managed FortiSwitch returns a reset status. Sflowd is crashing due to invalid custom application category. For inquires about a particular bug, please contact Customer Service & Support. The following issues have been fixed in version 6.2.7. Minimum version of TLS services automatically changedĭowngrading to previous firmware versionsĪmazon AWS enhanced networking compatibility issueįortiGuard update-server-location setting SSL traffic over TLS 1.0 will not be checked and will be bypassed by default L2TP over IPsec on certain mobile devices Use of dedicated management interfaces (mgmt1 and mgmt2)
Using FortiManager as a FortiGuard serverįortiClient (Mac OS X) SSL VPN requirements FortiOS Release Notes | FortiGate / FortiOS 6.2.7 | Fortinet Documentation Library
0 kommentar(er)
