Central Manager
The following issues have been fixed in FortiEDR 5.2.0Central Manager. For inquires about a particular bug, please contact Customer Service & Support.
Central Manager - Build 3195
|
Bug ID |
Description |
|---|---|
|
982035 |
5.0.3 Collectors become degraded when connected to environments running Central Manager build 3192. |
Refer to Central Manager - Build 3195 for a list of new features and changes for this build.
Central Manager - Build 3192
|
Bug ID |
Description |
|---|---|
|
923288 932101 |
Wrong "LAST LOGGED" information is displayed for Collectors. |
|
970587 972801 965069 |
Personal data deletion issue. |
|
970474 968529 958235 |
Too much disk usage.
|
|
964773 957887 |
Optimize event association in case of identical device names. |
| 963945 | Issues with tooltip text in Advanced section of Process Exclusions. |
|
957884 969493 |
Exception issue related to moving Collectors between groups. |
|
967425 968998 |
Issue with running ad hoc AV scan. |
|
961123 967531 |
Issue with exporting communication control report to Excel. |
|
904025 904727 |
Issue with exporting an event. |
|
929039 930689 |
Issue with Exclusions Manager related to a path prefix. |
|
929021 930223 883555 |
Login failure. |
|
912640 926346 |
Issue with Event Viewer bubble event count. |
|
924830 926351 |
Failure in exporting an organization due to folder cleanup issues. |
|
924830 937458 920919 |
"Last seen" time display issue for degraded Collectors. |
|
935936 934162 |
A rare login issue. |
|
961784 934991 |
Failure in getting advanced details in Event Viewer. |
|
932987 934008 |
A handled event is not marked as archived. |
|
932207 970381 933515 |
Issue with event count on Dashboard. |
|
931570 |
Improvements to EDR2 request handling. |
|
928984 931136 |
Empty uncovered RDI list. |
|
949854 948100 956859 |
The Event Viewer is slow. |
|
949004 953122 |
Upgrade failure. |
|
951421 |
Java library version update. |
|
946869 950777 |
Issue with exceptions raw IDs. |
|
912578 925472 |
Process path tooltip display issue when a wild card is used. |
|
938902 922428 |
Failure in deleting an organization. |
|
937104 960941 962956 961958 |
Missing logs in syslog. |
|
916258 961435 |
Cleanup of invalid RDIs. |
|
967203 965727 961437 |
Issue related to command line exceptions. |
|
963337 958186 |
Central Manager upgrade issue related to NGINX. |
|
958381 940003 |
A rare upgrade issue. |
|
940366 |
Cloud Core configuration issue. |
|
904864 918535 |
Threat Hunting Repository streamer performance improvements. |
|
972505 943434 |
Log zipping fails if the log file is in use. |
|
881686 |
Aggregator name display issue. |
|
928716 927236 |
Issue with uploading Central Manager certificate. |
|
953119 |
When proxy is used, Nginx configuration should be modified. |
|
886278 971015 |
Failure in deleting a rule for Communication control applications. |
|
948509 936863 |
LDAP authentication failure related to special characters. |
|
954955 949984 |
Cannot save queries with a length exceeding a certain number of characters. |
Refer to Central Manager - Build 3192 for a list of new features and changes for this build.
Central Manager - Build 3092
|
Bug ID |
Description |
|---|---|
|
958607 |
Corrupted application messages create large local kahaDB. |
|
960606 |
Console slowness and pages do not load properly. |
|
961006 |
Align command line field lengths to 512 characters. |
|
960198 |
Application learning fails if the application JSON includes corrupted characters. |
Refer to Central Manager - Build 3092 for a list of new features and changes for this build.
Central Manager - Build 3091
|
Bug ID |
Description |
|---|---|
|
958186 958381 |
Upgrade failure. |
|
932005 |
Search by partial string does not work. |
Central Manager - Build 3087
|
Bug ID |
Description |
|---|---|
| 943886 | New collector status indicating Windows OS version identification issue. |
Central Manager - Build 3086
|
Bug ID |
Description |
|---|---|
|
912055 937923 |
Events view is slow. |
|
799467 819949 |
Improvements to command line exceptions. |
|
941462 942009 |
Server start issue related to LDAP. |
|
904025 904727 |
Failure in exporting a security event to JSON. |
|
928566 931567 |
Manual decisions do not appear in the exported Excel report for applications. |
|
912159 913479 |
Improvements to maximum applications decisions matrix. |
|
940350 943022 |
Addition of AV signature proxy. |
| 926780 | Support child process in exception. |
| 947675 | Improvements to host header check. |
| 944821 | Command line exception modification fix. |
| 943886 | Report offsets in Central Manager UI. |
| 948107 | Socket timeout on search. |
| 948105 | Issue with adding exception for event. |
| 951296 | Enable built-in hidden threat hunting exclusions via content. |
| 948101 | Failure in sending security events. |
Central Manager - Build 3056
|
Bug ID |
Description |
|---|---|
|
942628 942600 943021 |
System slowness caused by query. |
|
941462 942009 |
Upgrade failure due to LDAP gateway configuration. |
|
912055 937923 |
Event text search is slow. |
Central Manager - Build 3051
|
Bug ID |
Description |
|---|---|
|
842929 896286 888553 |
Incorrect values for the Most Targeted widget. |
|
840100 839820 889118 859620 |
Enhanced security fixes. |
|
858211 858976 |
A minor text fix on the two-factor authentication scan QR code login page. |
|
929789 931145 |
Issue with Rest API Threat Hunting search call. |
|
929021 930223 |
Login failure after password change. |
|
921592 927691 |
Improved event handling time to prevent FCS issues. |
|
921771 925459 |
Delays in marking an event as handled. |
|
914508 924976 |
Improved performance of the Event Details page. |
|
913631 924148 |
Remote Shell connection issue for on-premise environments. |
|
921852 922826 |
Default interval for code requirement is overridden inconsistently during two-factor authentication login. |
|
912093 921994 |
No validation for file names and file paths. |
|
919368 916180 921995 |
The Collector flips between Running and Disconnected modes. |
|
914681 918951 |
Improved dashboard performance. |
|
901127 915697 |
Translation issue in exported logs. |
|
877188 915700 |
Search results show only top level Events with no RDIs. |
|
886258 874806 914795 |
Discrepancy in the event classification. |
|
910653 934007 |
Degraded Collector due to a configuration issue. |
|
929369 929741 |
New collectors registration rate is slow. |
|
930035 932915 936869 936029 931146 |
Cannot edit path in exception due to path length. |
Central Manager - Build 2825
|
Bug ID |
Description |
|---|---|
|
907548 913477 |
A partially covered exception is shown as fully covered. |
|
905373 913007 |
Issue with saving personal data handling report. |
|
901938 908738 |
Saved query creation by Hoster user via REST API can fail when mapping certain tags. |
|
912185 913005 |
Small UI typo. |
|
910179 911014 |
Deleting a communication control policy results in a console freeze. |
|
907606 909269 |
Add tooltip value to all connectors Test operation for localized languages. |
|
882668 916147 |
Exception covering query inaccurate calculation if process is missing. |
|
916460 916890 |
Redundant characters in exported system events file. |
|
911601 916429 |
Archiving or unarchiving a big number of events might result in error. |
|
903734 899802 915346 |
A malfunction in Central Manager related to connection failure. |
|
900853 911012 |
Failure to create an exception for a specific event. |
|
903945 907236 |
Empty user selection in Exception. |
|
896452 915339 |
Issue with "In Use License" display. |
|
900453 909319 |
Prevent Exceptions creation for XDR events RDIs in Forensics. |
|
895245 907235 |
Translation issue affecting DB migrations. |
|
748705 919889 761444 |
Issue related to validation of registration password. |
|
892337 909267 |
Minor UI issue in "Organizations" tab related to the "In Use" column. |
|
918876 919334 |
Improve performance of Central Manager UI. |
|
916975 918532 |
Upgrade issue. |
|
914790 913485 915377 912469 917367 917363 884746 912468 915274 |
Performance enhancements. |
Central Manager - Build 2773
|
Bug ID |
Description |
|---|---|
|
915274 912470 |
Performance enhancements. |
Central Manager - Build 2772
|
Bug ID |
Description |
|---|---|
|
899707 904312 |
Missing email notifications. |
|
879357 905781 |
Console failure. |
|
893244 863213 890342 |
High CPU in Aggregator due to kernel modules requests. |
|
902620 904726 |
Import fails in migration in a specific case related to application control tags in source organization. |
|
903984 905371 904731 |
Registration of Collectors with same MAC address and serial number (different host name) lead to rollback. |
|
900671 901836 |
Upgraded Collectors flips between degraded/disconnected status. |
|
860955 906265 |
OS reports show wrong Windows versions in some cases. |
|
874436 870839 |
Change "Service KEYLOGGING" to "Keylogging" in Event Graph. |
|
891937 895257 |
A case of console failure. |
|
842929 896286 888553 |
Incorrect values in the "Most Targeted" widget. |
|
889459 905782 |
Editing communication control policy does not display the whitelisted vendors. |
| 885865 | Java 17 support. |
| 905250 | Pendo support. |
| 886739 | Minor UI fix in Hoster view. |
| 909320 | Enhance management of concurrent registrations. |
| 893040 | Support maximum exceptions limit per organization. |
|
909661 909662 |
Failure in deleting an account. |
| 909660 | AV scan failure. |
Central Manager - Build 2708
|
Bug ID |
Description |
|---|---|
|
879182 891184 |
Issue with Executive summary report repository count. |
|
885914 846349 889944 |
"Invalid Date" message under Event Viewer >> Advanced Data. |
|
884992 886943 897967 884216 |
Failure in syslog notification. |
|
883908 894388 |
Failure in archiving all events. |
|
887397 890338 |
Application Control logs are not sent externally via syslog. |
|
867670 890635 894390 |
An issue with saving exception with Linux Collector. |
|
890853 895263 |
High RAM utilization. |
|
893793 889414 |
A case of Manager malfunction. |
|
893244 904730 |
Memory allocation failure due to configuration. |
|
887097 888961 |
Clean expired REST requests. |
|
900732 901984 905467 905778 |
Events are missing alerts. |
|
891826 903783 |
Ad-hoc scan does not report any findings. |
|
903984 904734 |
The Central Management console is slow. |
|
905371 904731 |
Registration issue of Collectors with the same mac and serial number. |
| 894387 | Failure to retrieve a file from the Treat Hunting right panel. |
|
862253 |
Support stronger ciphers used for FortiEDR servers communication. |
|
895261 |
Set VDI exclusions to improve management of DB connections. |
|
906256 |
Cannot add or upload applications under Security Settings >> Application Control Manager. |
Central Manager - Build 2594
|
Bug ID |
Description |
|---|---|
|
875593 876337 |
Address issue with Rest API login hardening. |
|
852990 879601 |
Error when moving collectors between tenants. |
|
879420 879606 |
Application reports failure in migrated collector. |
|
887397 890338 |
Syslog logs for Application Control Security events are not being sent. |
|
881056 889946 |
Simultaneous assignment of a new collector version for two accounts causes an error. |
|
861482 865823 867906 |
Java libraries update. |
|
894944 887212 |
A case of high CPU load. |
| 875455 | Communications Control issue with creating a specific rule. |
| 827997 | Add the capability to disable the "auto collectors update" checkbox. |
| 864981 | A Collector with invalid GUID fails to register. |
| 884210 | Wrong title of warning message when renaming Exclusion list. |
| 885864 | IPv6 issue. |
| 881197 | High CPU in Central Manager. |
| 884215 | High CPU issue with whitelisting. |
| 817181 | Audit for Extra Config actions. |
Central Manager - Build 2527
|
Bug ID |
Description |
|---|---|
|
852046 874276 |
Enrich error in the log with request parameters in the events search.
|
|
866812 874708 |
A case of failure to load an event.
|
|
863631 867904 |
Memory optimization when loading event aggregations . |
|
857321 864556 |
Syslog language translation fix.
|
|
865050 874275 |
A case of operation failure when using "Select All" on multiple Collectors.
|
|
861193 872850 870975 |
Cases where some events data fails to be loaded.
|
|
871504 877503 |
Japanese localization translation fixes.
|
|
866397 850468 873444 |
Discrepancy in licenses count.
|
|
874002 875452 |
An edge case display of application version of deleted Collectors.
|
|
870780 876334 |
Possible lock of multiple registration requests causes slowness of console.
|
|
860955 880126 |
Collector OS version tooltip display fix.
|
|
868032 868583 877937 |
A case of agents running in autonomous mode due to a configuration issue.
|
|
840247 870834 |
A case where Communication Control data fails to display.
|
|
875608 876345 |
Address issue with Rest API token expiry.
|
|
855481 864553 |
Deletion of a group with agents might lead to degraded state.
|
|
879210 881592 |
Fix display of file type on Threat Hunting profile.
|
|
879816 883415 |
A case of a gap between Filtered and Exported Event data in Excel.
|
|
875593 876337 |
Address issue with Rest API login hardening.
|
|
879247 880027 881119 |
A case of failed SAML authentication.
|
|
871483 878725 |
Some characters in repository assignment description are not translated.
|
|
771934 877507 |
Authentication QR code issue.
|
|
875191 881589 |
Communication control resource management.
|
|
875191 878528 881876 841444 845306 868579 |
Console slowness. |
Refer to Central Manager - Build 2527 for a list of new features and changes for this build.
Central Manager - Build 2387
|
Bug ID |
Description |
|---|---|
|
860220 843211 870257 |
A case of Collector registration identification issue. |
|
863829 869222 |
Audit export failure for specific date intervals. |
|
866751 870647 |
Japanese language - An English message is displayed in User Details Advanced panel. |
|
867665 869516 867670 |
RHEL Collectors displayed under New OS Family in Inventory. |
|
865490 870634 |
A case of REST API GET response discrepancy. |
|
847535 870032 |
The title of the browser tab does not display "Fortinet" on macOS. |
|
867799 872302 |
A case of Geo Location display discrepancy. |
|
871437 877069 872663 |
A case of Threat Hunting degradation. |
|
865696 872737 868257 |
Syslog messages stopped after a network failure. |
| 785198 | Inventory - Clear the master checkbox selection upon new searches. |
|
852093 860367 |
A case of empty User Name Entries within Audit Logs for Communication Control. |
|
861881 864983 857295 |
Japanese localization fixes. |
|
842929 844134 866786 868904 |
"Most targeted״ widget display issue. |
|
865964 870383 |
Event search by agent name works slower than expected. |
|
873147 874709 |
Exclusions: "Signer" UI field was activated after record modification. |
|
869248 866714 |
A case of exclusion deletion failure. |
|
866109 869781 |
Erroneously displays event as covered despite triggered rule excluded. |
|
823182 870637 |
An issue with using SAML in Azure. |
|
868003 873781 875609 847528 848524 843608 848358 854262 810261 850760 |
An issue with parent process resulting in uncovered RDI. |
|
866403 867136 |
Repository usage displays values beyond 100%. |
|
863850 868255 |
A rare case where a Collector is not successfully deleted causing a configuration issue. |
|
835130 871951 |
A rare case of Audit Log discrepancy. |
| 871938 | A case of a failure to save exceptions when created via the Support menu. |
| 871945 | A rare case where a scheduled saved query run on an expired organization. |
Refer to Central Manager - Build 2387 for a list of new features and changes for this build.
Central Manager - Build 2363
|
Bug ID |
Description |
|---|---|
|
857269 867140 |
AV scan and periodic scan do not execute bi-weekly according to audit. |
|
863631 867904 |
Memory optimization when loading event aggregations. |
|
852083 864558 |
A case of periodic scan indication discrepancy. |
|
865695 867561 |
A case of high disc space usage. |
| 845302 | A case of Threat Hunting facets discrepancy. |
| 870576 | Issue with FCS registration failure. |
Central Manager - Build 2358
|
Bug ID |
Description |
|---|---|
|
849898 854247 854959 |
A case of degraded status in Collector related to configuration update error. |
|
844232 854127 |
An issue with selecting all groups on assigning security policies. |
|
842755 849836 850671 853336 853780 |
A case of failure to open a specific event in the Forensics tab. |
|
843211 856940 |
A rare issue with registering a Collector. |
|
859455 860086 860760 |
A case of failure to run Collectors report. |
|
851572 854535 |
Improved logs in applications learning flow. |
|
837455 842669 857298 |
FortiSandbox integration connector failure. |
|
863114 864984 |
A case of an unresponsive environment related to events with non-UTF-8 characters. |
|
856319 858986 |
Registration failure when using an invalid ID. |
|
845409 855784 |
A case where a scheduled query fails to run. |
|
848664 |
IoT Device Discovery collector group exclusion not retaining settings. |
|
861510 864557 |
A case of failure to retrieve data when non-UTF-8 characters exist. |
Central Manager - Build 2325
|
Bug ID |
Description |
|---|---|
|
818856 |
save-query API call produces error 500 when attempting to add scheduled query. |
|
819083 |
Repeating system events on a migrated Collector. |
|
825236 |
Add new configuration to management default extra config (drivers monitoring). |
|
827946 |
Saving a Threat Hunting query for all organizations may create multiple queries. |
|
830906 |
A case of query parsing failure. |
|
830935 |
A case when Event Viewer displays errors related to database. |
|
835075 |
Occurrence of events ״handled by״ username display issue. |
| 835446 | LDAP connection periodic warning. |
|
837178 |
Issue with Connector credentials update. |
|
837477 |
Case of event for scheduled Threat Hunting query incorrectly shows Collector status. |
|
837675 |
No on-premise support. |
| 838183 | Dashboard security events and Event Viewer do not show exactly the same list of unhandled processes/events. |
|
839687 |
An issue where Executive Summary negates Communication Control Graph data. |
|
839748 |
Exception covering query discrepancy when event's process is missing. |
|
840527 |
A case of failure to save contact and SMTP connection test failure. |
|
840741 |
A case of Remote Shell failure to connect. |
| 842929 | "Most targeted" Dashboard widget displays incorrect values. |
| 852990 | Display issue of Collectors that were moved from one tenant to another. |
|
856319 |
A case of registration failure. |
| 856646 | Missing "Organization" parameter on custom installers. |
|
822053 842231 |
Java permission error when viewing security events. |
|
824323 820132 |
A case of exception covering query discrepancy where Collector was removed. |
|
833313 838895 |
Rare failure in generating Collectors report. |
|
844288 841058 |
Covering query performance improvement. |
|
855044 798891 807585 854492 |
Japanese localization UI fixes. |
Refer to Central Manager - Build 2325 for a list of new features and changes for this build.
Central Manager - Build 2162
|
Bug ID |
Description |
|---|---|
|
839641 834706 |
Exception covering query miscalculation when using parent process. |
| 839917 | Case of FortiEDR Aggregator sporadical disconnection. |
| 835764 | Case of REST list-raw-data-items call failure. |
|
835446 |
LDAP connection periodic warning. |
|
845307 |
Offloading load from the Manager by dropping suppressed events. |
|
844125 |
Optimization during security events and IoT deep scans. |
|
842870 |
Log Json content in case invalid event is received. |
|
846974 |
Rare case of some syslog massages not being received. |
Refer to Central Manager - Build 2162 for a list of new features and changes for this build.
Central Manager - Build 2159
|
Bug ID |
Description |
|---|---|
| 741117 |
Hardening of interfaces. |
|
843238 |
Issue with system upgrade related to deployment configuration. |
|
843709 |
Issue with AV Router configuration. |
Central Manager - Build 2157
|
Bug ID |
Description |
|---|---|
|
807496 |
Localization issue. |
|
828010 |
Case of Event Handling view infinite loading. |
|
828322 |
Manager crash related to a case of over 100K applications. |
|
828830 |
Communication Control Applications deletion issue. |
|
829902 |
Failure to add action to Custom Connectors. |
|
830429 |
Case of File deletion information missing in Audit Logs. |
|
830547 |
Exception creation issue. |
|
831124 |
Slowness of Events Search. |
|
831565 |
Failure in get-events API. |
|
832527 |
Hardening of interfaces. |
|
833335 |
The testing of SMTP/Connector configuration connection, resulting in test failure even though connection is working. |
|
834576 |
Remote shell UI issue. |
|
835213 |
Case of failure to login with Two-Factor Authentication after upgrade. |
|
837036 |
Case of error message in UI when deleting Application version of a product. |
|
837807 |
Case of Management deadlock during simultaneous actions. |
|
839575 |
Forensics UI issue of a deleted event. |
|
839641 |
Irrelevant Exceptions are listed under different RDIs. |
|
840449 |
FortiSandbox integration sporadically fails. |
|
820239 830411 |
Case of Management Remediation action mapping issue. |
|
833861 836020 |
Cases of failure to upgrade. |
|
834337 836675 |
Remote shell availability cases. |
|
839244 839917 |
Sporadically disconnected Connectors related to failure to get Configuration. |
|
834341 828705 831980 |
Resolved logic of Same IP appearing in both "Included" and Excluded" in "Internal Destinations". |
|
835821 837985 837202 |
Case of slowness and Console freeze. |
|
826090 829671 831565 824442 |
Change settings of events reduction mechanism. |
Central Manager - Build 2132
|
Bug ID |
Description |
|---|---|
|
761756 |
Remove Communication Control error indication related to limit in old Collector. |
|
770487 |
Search by OS family on Inventory Advanced Search. |
|
773051 |
Repeating system events on a migrated Collector that failed to register in the destination environment. |
|
784040 |
Fixed incorrect number of events showing under Forensics tab. |
|
785521 |
Fixed Threat Hunting Repository show as degraded in the dashboard. |
|
790839 |
Fixed REST API method to get collectors for a time range. |
|
794021 |
FortiEDR blocks FortiClient. |
|
794727 |
Special Character '#' at start of filename results in empty field in exported Threat Hunting event. |
|
796874 |
Fixed edge case of Security Event not showing on Manager. |
|
800949 |
Fixed degraded Collector edge case related to Configuration path. |
| 802617 | Fixed Automatic Collectors upgrade following core upgrade. |
|
803646 |
Fixed case of moving selected Collectors from filtered Collectors view. |
|
806578 |
Fixed edge case of FortiEDR Console user password reset failure. |
|
806614 |
Fixed Hoster view of unmanaged devices. |
|
807224 |
Event Viewer search by raw ID doesn't filter out the exact event. |
|
810818 |
Threat Hunting Profiles: Cannot re-assign group to a different Collection profile. |
|
811066 |
Core degraded due to wrong configuration related to XDR policy. |
|
811894 |
Threat Hunting data backup is now enabled by default. |
|
813470 |
Fixed Communication Control Application not shown due to missing details. |
|
813895 |
Remote Shell is now working on Windows 7 32-bit (supported from Collector version 5.2.0.2241). |
|
814292 |
Fixed slow loading of Security Events screen with Unhandled filter. |
|
817496 |
Enhanced response time of search on Communication Control Applications page. |
|
817636 |
Fixed Collector registration failure due to Aggregator load balancing. |
|
824954 |
Fixed failure to delete local Aggregator following a split. |
|
827999 |
Failed login with LDAP user after restart of Central Manager. |
|
828014 |
The VirusTotal links in advanced data of event are broken. |
|
829134 |
Login failure with LDAP user. |
|
781603 818458 |
Fixed Playbook dropdown usage when selecting a Connector. |
|
803035 785521 |
Events search is slow. |
|
819728 822280 |
Fixed Manager malfunction upon updating Events. |
|
820995 786407 |
Fixed Applications Advanced filter edge cases. |
|
825077 816863 |
Slow console due to Exception Covering Query calculation. |
|
771167 791770 792560 |
Fixed edge case of inaccurate CVE data presentation for application. |
|
801620 817661 816437 |
Fixed Collector degradation issue due to missing configuration. |
|
760128 767850 766885 754659 797622 790103 |
Enhancement of security events search performance by allowing the user to search by specific columns. |
|
784591 810083 794015 821396 816887 816402 821466 796235 761953 793155 810081 810168 828134 |
Resolved Exception covering discrepancies. |
Central Manager - Build 2040
|
Bug ID |
Description |
|---|---|
|
774106 |
New Collectors appear as degraded due to internal parsing issue of exclusion path. |
|
809270 |
License expiration date is one day earlier than expected when you save organization properties. |
|
810100 |
Inaccurate Collector status displayed on Inventory. |
|
808059 811066 |
Cores become degraded once XDR policy is cloned. |
Refer to Central Manager - Build 2040 for a list of new features and changes for this build.