Some transceiver types are not displayed correctly on the FortiGate-7000F GUI.

The Average NPU sessions counter displayed on the FIM GUI or CLI may show an incorrect negative value.

Traffic from banned IP addresses can still pass through the FortiGate-6000 or 7000.

After an FGCP HA failover, duplicate IPv4 ECMP routes are installed on all FPCs except for the primary FPC of the new primary FortiGate-6000.

LAGs between the FortiGate-7000E M1 and M2 interfaces are not supported.

In some cases, after an HA FGCP failover, the routes on the primary FPC are not the same as the routes on other FPCs.

Outbound bandwidth traffic statistics are showing incorrectly on individual FIM and FPM GUI pages.

The capture-packet option is not available for some firewall policies.

Management traffic (for example, running a ping) cannot pass through VLANs added to npu_vlink interfaces.

Filter options are not available on the Firewall User Monitor GUI page.

Proxy policy traffic hit counters on the GUI remain at 0 even though the policy is processing traffic.

An FPM that receives an ICMP6 error message broadcasts the message to other FPMs, even though the receiving FPM has a session matching the payload of that error message.

DNS requests logs showing the source IP as in an internal FortiGate-6000 or 7000 IP address such as 10.101.11.7 or 10.101.11.8 .

The GUI may sometimes crash and be inaccessible after adding a VLAN interface.

Dialup server IPsec VPN tunnels are not synchronized to all FPCs or FPMs if mode-cfg is enabled.

Some configuration elements may remain after resetting the configuration of an FPM to factory defaults.

NP7 hardware DoS protection does not work as expected.

Management, local-out, and IPsec VPN traffic over NPU inter-VDOM links and with VLANs added to NPU inter-VDOM links does not work. Reply traffic terminates on an FPC or FPM instead of on the management board or primary FIM. This bug affects all management and local out traffic over NPU inter-VDOM links, for example:

• IKE negotiation if the IPsec VPN tunnel interface is an NPU inter-VDOM link or a VLAN added to an inter-VDOM link.

• Local-out authentication traffic used to connect to a remote authentication server (for example, LDAP, RADIUS, SSO).

• Management communication with FortiAnalyzer, FortiManager, and FortiGuard.

• ICMP traffic from the management board or primary FIM.

When consolidated firewall mode is enabled, policy statistics such as the number of active sessions, packets, bytes, and so on are not available from the management board or primary FIM. The management board GUI and primary FIM GUI do not display policy statistics and REST API calls and SNMP queries to the management board or primary FIM for policy statistics return with no information. Policy statics are available from individual FPC or FPMs. For information about consolidated firewall mode, see Combined IPv4 and IPv6 policy.