What's new
FortiADC 7.6.3 introduces enhancements and new features across various modules including Web Application Firewall, Server Load Balance, Global Load Balance, and more.
More detailed information is available in the New Features Guide.
Network
IPv6 Support for HA Management Interface
FortiADC now supports configuration of an IPv6 address on the HA management interface, allowing administrators to access the system using either IPv4 or IPv6. This enhancement expands flexibility for deployments in dual-stack or IPv6-only environments.
IPv6 Router Advertisement Support via CLI
This enhancement adds the new CLI command config router ipv6-ra to support the Router Advertisement (RA) functionality, allowing FortiADC to act as an IPv6 router and broadcast configuration information to hosts on the network. This feature helps fulfill RIPE-772 compliance requirements and supports automatic IPv6 address configuration (SLAAC) as well as DNS configuration via RA options.
IPsec-Based Authentication and Encryption for OSPFv3 via CLI
FortiADC 7.6.3 introduces CLI-based support for IPsec authentication and encryption in OSPFv3, enabling secure exchange of dynamic routing information over IPv6. This enhancement helps meet regulatory and security requirements in environments where OSPFv3 packet confidentiality and integrity are mandatory.
Server Load Balance
L4 Virtual Server Support for ESP Packets (IPsec VPN without NAT-T)
FortiADC 7.6.3 adds support for handling ESP (Encapsulating Security Payload) protocol traffic in Layer 4 virtual servers. This enhancement enables FortiADC to support IPsec VPN deployments that operate without NAT Traversal (NAT-T).
Previously, ESP packets were dropped when received by L4 virtual servers because the ESP protocol was not supported in Layer 4 SLB mode. This limitation prevented FortiADC from serving as a load balancer for IPsec VPN endpoints in non-NAT-T environments.
With this enhancement, FortiADC introduces session association logic that maps ESP packets to the IKE (Internet Key Exchange) session established during the initial VPN handshake.
Platform
New FortiADC-VMUL License Model and Expanded VDOM Support for Virtual Appliances 7.6.3
FortiADC 7.6.3 introduces the FortiADC-VMUL license model, a new virtual appliance option designed to support large-scale deployments requiring high vCPU and VDOM capacity. Unlike other VM models, VMUL supports deployment on systems with significantly higher compute resources—for example, configurations with 64 vCPUs—providing improved scalability and flexibility for enterprise and service provider environments.
As part of this enhancement, the maximum number of supported VDOMs has been expanded for several FortiADC virtual machine models. Previously, VM04 and VM08 were limited to 10 VDOMs, but with FortiADC 7.6.3, VDOM limits now align more closely with system memory allocation. VMUL supports up to 90 VDOMs, matching the capabilities of the high-end VM32 model.