DNS filtering does not perform well on the zone transfer when a large DNS zone's AXFR response consists of one or more messages.

Unwanted traffic log generated for firewall policy with web filter profile as MonitorAll.

Custom admin is unable to load FortiView when VDOMs or FortiCloud logging are enabled.

FortiView > Sources historical view sometimes cannot retrieve data from FortiCloud.

GUI on FG-3800D with 5.6.3 is very slow for configurations with numerous policies.

While accessing the FortiGate page, PC browser memory usage keeps spiking and finally PC hangs.

When modifying the g-default web filter, access denied error message appears.

GUI is slow in FG-300D, FG-500D, FG-600D, FG-1000D, and FG-1200D with a high number of firewall policies.

Should not be able to unset user or user group on an SSL VPN policy when inline editing the source column in the policy list.

IP pools in SSL VPN settings are overwritten when SSL VPN settings are modified in the GUI.

When sending CSF proxied request, segfault happens (httpsd crashes) if FortiExplorer accesses root FortiGate via the management tunnel.

IP pool and tunnel mode settings in config vpn ssl web portal are overwritten when SSL VPN settings are modified in the GUI.

GUI behavior is different with local user using super admin profile and TACACS user using super admin profile.

ha-mgmt gateway IP gets synced from the primary device to secondary device after restoring configurations.

application hasync returns "*** signal 11 (Segmentation fault) received ***".

FGSP configured with standalone-config-sync will sync the FortiAnalyzer source IP configuration to the secondary device.

Cluster upgrade from 5.6.7 build 1653 to SB 5.6.8 build 3667 takes longer than normal.

HA cluster GUI change does not send logs to the secondary device immediately.

Receiving IPS engine application crash messages.

In an ADVPN spoke with one interface connecting to two hubs, the shortcut created on receiver side matches to the wrong phase 1.

IKED memory leak.

reportd is sometimes stuck at 99% CPU usage.

Add CLI setting to configure timeout value when connecting to FortiGate Cloud. Enable async_log retrieval from FortiGate Cloud.

miglogd high CPU utilization.

FortiOS 6.0.6 reports too long VPN tunnel durations in local report.

sentdelta and rcvddelta showing 0 if syslog format is set to CSV.

sentdelta and rcvddelta log fields appears as 0 in syslog CEF format.

External resource does not support no content length.

In WAD conserve mode 5.6.8, max_blocks value is high on some workers.

WAD crash causing traffic interruption.

BGP Confederation router sending incorrect AS to neighbor group routers.

VRRP on LAG cannot forward packet after vrrp-virtual-mac is enabled.

After failover/recovery of link, E2 route with non-zero forward address recurses to itself as a next hope.

FortiGate sends malformed OSPFv3 LSAReq/LSAck packets on interfaces with MTU = 9k.

PPPoE interface bandwidth is mistakenly calculated as 0 in SD-WAN.

The Access Layer Quarantine action is not propagated to the downstream device in Security Fabric > Automation.

Invalid CIDR format shows as valid by the Security Fabric threat feed.

Internal website (confluence.1wa.local) not loading all elements with SSL VPN web mode (it works fine internally).

FortiMail login page with SSL VPN portal not displaying correctly.

SSL VPN does not show correctly in the Windows Admin Center application.

NextCloud through SSL VPN behaving strangely.

The EOASIS website is not displayed properly using SSL VPN web mode.

Unable to download report from an internal server via SSL VPN web mode connection.

In SSL VPN web mode, page keeps loading after user authenticates into internal application.

Internal prioritization of OSPF/BGP/BFD packets in conjunction with HPE feature to ensure these routing packets are handled in time. It affected all NP6 platforms.

diagnose firewall proute list should not print vwl_mbr_seq if it is not generated by the VWL service rule.

IPinIP traffic over another IPinIP is dropped in NP6-Lite when offloading is enabled.

HPE does not protect against DDoS attacks like flood on IKE and BGP destination ports.

DHCP-enabled interfaces occasionally fail to perform discovery.

FG-800D shows wrong HA, ALARM LED status.

Making a change to a policy using inline editing is very slow with large table sizes.

SNMP polling stopped when FortiManager API script executed onto FortiGate.

The FortiCloud daemon (forticldd) resolves mgrctrl1.fortinet.com to the wrong IP address.

DNS servers acquired via PPPoE in non-management VDOMs are used for DHCP DNS server option 6.

Traffic cannot be offloaded to both NTurbo and NP6 when DoS policy is applied on ingress/egress interface in a policy with IPS.

Enabling offloading drops fragmented packets.

Enabling ECN dramatically decreases TCP throughput on FG-3400E.

GUI cannot show default Fortinet logo for replacement messages.

FortiGate returns an invalid configuration when FortiManager retrieves the configuration.

QSFP interface goes down when the get system interface transceiver command is interrupted.

Local system DNS setting instead of DNS setting acquired from upstream DHCP server was assigned to client under management VDOM.

Console outputs master change information after entering forticontroller mode and config-error-log.

Out of order packets for an offloaded multicast stream.

Low throughput on subinterfaces VLAN because IP packets are marked with ECN = CE flag.

Guest portal RADIUS authentication failure due to FortiAuthenticator trying to resolve third-party websites as access points.

RADIUS MSCHAP-v2 authentication fails against Windows NPS with non-ASCII characters in user password.

fnbamd has high CPU usage and user is unable to authenticate.

vMotion tasks cause connections to be dropped as sessions related to vMotion VMs do not appear on the destination VMX.

Azure autoscale not syncing after upgrading to 6.2.2.

SDP information fields are not being natted in multipart media encapsulation traffic.

FortiOS 6.0.9 is no longer vulnerable to the following CVE Reference:

• CVE-2018-9195

Please read the section under Upgrade Information > FortiGuard protocol and port number.

FortiOS 6.0.9 is no longer vulnerable to the following CVE Reference:

• CVE-2019-6696

FortiOS 6.0.9 is no longer vulnerable to the following CVE Reference:

• CVE-2019-15703

FortiOS 6.0.9 is no longer vulnerable to the following CVE Reference:

• CVE-2019-15703