Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

Changes in default values

Firewall

The default profile for ssl-ssh-profile is changed from certificate-inspection to no-inspection.

Previous releases

6.2.1 release

Config firewall policy
  edit [Policy ID]
    set ssl-ssh-profile certificate-inspection
  next
end
Config firewall policy
  edit [Policy ID]
    set ssl-ssh-profile no-inspection
  next
end

 

IPsec VPN

The default value for net-device option under dynamic(dialup) tunnel has changed from disable to enable.

Previous releases

6.2.1 release

config vpn ipsec phase1-interface 
   edit [Tunnel Name] 
      set type dynamic 
      set net-device disable 
   next 
end
config vpn ipsec phase1-interface 
   edit [Tunnel Name] 
      set type dynamic 
      set net-device enable 
   next 
end

 

Log & Report

The default value, minimum value, and maximum value for memory log is changed.

Previous releases

6.2.1 release

config log memory global-setting
   set max-size 65536
end
config log memory global-setting
   set max-size [1% of total RAM]
end

 

Routing

The default SD-WAN health-check interval is changed from 1 to 500 and the unit is changed from seconds to milliseconds.

Previous releases

6.2.1 release

config system virtual-wan-link 
   config health-check
      edit [Health Check Name]
         set interval 1
      next
   end
end
config system virtual-wan-link 
   config health-check
      edit [Health Check Name]
         set interval 500
      next
   end
end

 

The default link-monitor interval is changed from 1 to 500 and the unit is changed from seconds to milliseconds.

Previous releases

6.2.1 release

config system link-monitor
   edit [Link Monitor Name]
      set interval 1
   next
end
config system link-monitor
   edit [Link Monitor Name]
      set interval 500
   next
end

 

System

The default protocol used for FortiGuard service communication is changed from UDP to HTTPS.

The protocol setting remains unchanged for FortiGates upgrading from v6.0 to v6.2.

Previous releases

6.2.1 release

config system fortiguard 
   set protocol udp 
   set port 8888
end
config system fortiguard 
   set protocol https 
   set port 8888
end

 

Switch Controller

The default value for FortiLink split interface is changed from disable to enable.

Previous releases

6.2.1 release

config system interface
   edit [FortiLink Interface]
      set fortilink enable
      set fortilink-split-interface disable
   next
end
config system interface
   edit [FortiLink Interface]
      set fortilink enable
      set fortilink-split-interface enable
   next
end

 

WiFi Controller

The default darrp interval is changed from 1800(s) to 86400(s).

Previous releases

6.2.1 release

config wireless-controller timers
    set darrp-optimize 1800
end
config wireless-controller timers
    set darrp-optimize 86400
end

Changes in default values

Firewall

The default profile for ssl-ssh-profile is changed from certificate-inspection to no-inspection.

Previous releases

6.2.1 release

Config firewall policy
  edit [Policy ID]
    set ssl-ssh-profile certificate-inspection
  next
end
Config firewall policy
  edit [Policy ID]
    set ssl-ssh-profile no-inspection
  next
end

 

IPsec VPN

The default value for net-device option under dynamic(dialup) tunnel has changed from disable to enable.

Previous releases

6.2.1 release

config vpn ipsec phase1-interface 
   edit [Tunnel Name] 
      set type dynamic 
      set net-device disable 
   next 
end
config vpn ipsec phase1-interface 
   edit [Tunnel Name] 
      set type dynamic 
      set net-device enable 
   next 
end

 

Log & Report

The default value, minimum value, and maximum value for memory log is changed.

Previous releases

6.2.1 release

config log memory global-setting
   set max-size 65536
end
config log memory global-setting
   set max-size [1% of total RAM]
end

 

Routing

The default SD-WAN health-check interval is changed from 1 to 500 and the unit is changed from seconds to milliseconds.

Previous releases

6.2.1 release

config system virtual-wan-link 
   config health-check
      edit [Health Check Name]
         set interval 1
      next
   end
end
config system virtual-wan-link 
   config health-check
      edit [Health Check Name]
         set interval 500
      next
   end
end

 

The default link-monitor interval is changed from 1 to 500 and the unit is changed from seconds to milliseconds.

Previous releases

6.2.1 release

config system link-monitor
   edit [Link Monitor Name]
      set interval 1
   next
end
config system link-monitor
   edit [Link Monitor Name]
      set interval 500
   next
end

 

System

The default protocol used for FortiGuard service communication is changed from UDP to HTTPS.

The protocol setting remains unchanged for FortiGates upgrading from v6.0 to v6.2.

Previous releases

6.2.1 release

config system fortiguard 
   set protocol udp 
   set port 8888
end
config system fortiguard 
   set protocol https 
   set port 8888
end

 

Switch Controller

The default value for FortiLink split interface is changed from disable to enable.

Previous releases

6.2.1 release

config system interface
   edit [FortiLink Interface]
      set fortilink enable
      set fortilink-split-interface disable
   next
end
config system interface
   edit [FortiLink Interface]
      set fortilink enable
      set fortilink-split-interface enable
   next
end

 

WiFi Controller

The default darrp interval is changed from 1800(s) to 86400(s).

Previous releases

6.2.1 release

config wireless-controller timers
    set darrp-optimize 1800
end
config wireless-controller timers
    set darrp-optimize 86400
end