Added more information to describe why in a virtual clustering configuration, using HA reserved management interfaces to manage individual cluster units is not supported, see Limitations of FortiGate-6000 virtual clustering.

New section Configuring a FortiGate-6000 to operate in FIPS-CC mode.

Corrected the information in SSL mirroring support.

Added information about what happens to the RAID configuration of a FortiGate-6301F or 6501F after installing firmware from the BIOS. See Installing firmware from the BIOS after a reboot.

FortiOS 6.2.11 document release. FortiGate-6000 for FortiOS 6.2.11 is a bug fix release. See the FortiGate-6000 for FortiOS 6.2.11 Release Notes for details about the content of this release. Corrected the description of the priority option in config load-balance flow-rule.

Changes to the following sections to correctly describe creating a LAG consisting of the HA1 and HA2 interfaces to improve FGSP session synchronization performance:

• FortiGate-6000 FGSP.

• Creating an HA1/HA2 LAG for FGSP session synchronization.

FortiOS 6.2.10 document release. FortiGate-6000 for FortiOS 6.2.10 is a bug fix release. See the FortiGate-6000 for FortiOS 6.2.10 Release Notes for details about the content of this release.

New section: Maximum number of flow rules limited by hardware.

Misc. changes throughout the document.

FortiOS 6.2.9 document release. FortiGate-6000 for FortiOS 6.2.9 is a bug fix release. See the FortiGate-6000 for FortiOS 6.2.9 Release Notes for details about the content of this release.

Both FortiGate-6501Fs or FortiGate-6301Fs in an FGCP cluster must have the same number of active hard disks and the same RAID configuration. For more information, see Before you begin configuring HA and Basic FortiGate-6000 HA configuration.

Updated and corrected FortiGate-6000 IPsec VPN. New section: Example FortiGate-6000 IPsec VPN VRF configuration.

Added information about support for load balancing sessions without syn packets to FortiOS features that are not supported by FortiGate-6000 v6.2.6.

Corrected the CLI syntax in the section VXLAN support.

FortiOS 6.2.6 document release. See What's new for FortiGate-6000 6.2.6 for information about new features.

New section: VLAN ID 1 is reserved.

Added a note about requiring the Security Fabric to be enabled for normal operation to Confirming startup status.

Added notes about changing the VDOM mode and HA, for example Before you begin configuring HA.

Corrections to information about handling fragmented packets, see Load balancing TCP, UDP, and ICMP sessions with fragmented packets.

Added information about FortiGate-6000F hardware generation 1 and generation 2, see FortiGate-6000F hardware generations.

New section: More ARP queries than expected for one device - potential issue on large WiFi networks.

Changes to SSL VPN load balancing, FPC failure, and FPC failover in a standalone FortiGate-6000. Changes to FortiGate-6000 high availability including the addition of two new sections:

• Primary FortiGate-6000 selection with override disabled (default).
• Primary FortiGate-6000 selection with override enabled.

Changes to the description of the recommended ICMP load balancing configuration for inter-cluster session synchronization as described in Inter-cluster session synchronization. VLAN IDs do not have to be same on peer clusters, as now correctly described in Example FortiGate-6000 inter-cluster session synchronization configuration.

Misc changes to CLI command syntax chapters. Added information about SDN connector support to FortiGate-6000 v6.2.4 special features and limitations and FortiGate-6000 v6.2.3 special features and limitations. New section: Troubleshooting an FPC failure.

Restored SD-WAN as one of the features in the section FortiOS features that are not supported by FortiGate-6000 v6.2.4.

New and changed sections:

• Multi VDOM mode and the Security Fabric.
• Failover protection.

Adding information about a new feature that supports load balancing TCP and UDP sessions with fragmented packets, see Load balancing TCP, UDP, and ICMP sessions with fragmented packets.