Cannot clear scanunit vdom-stats to reset the statistics on ATP widget.

DNS filter explicit block all (wildcard FQDN) not working in 6.2 firmware.

License shows expiry date of 0000-00-00.

FortiGate does not generate traffic logs for SOCKS proxy.

Cannot access explicit FTP proxy via VIP.

WAD cannot learn policy if multiple policies use the same FQDN address.

AV does not forward reply when GET for FTP over HTTP is used.

FTP traffic over HTTP explicit proxy does not generate traffic logs once receiving error message.

GUI does not show byte info for aggregate and VLAN interface.

Antivirus archive logging enabled from the CLI will be disabled by editing the antivirus profile in the GUI, even if no changes are made.

A message stating that all source interfaces have no members is erroneously displayed for the explicit proxy policy list when a user enables a policy immediately after pasting or inserting it into the list.

Interface filter get incorrect result (EMAC VLAN, VLAN ID, etc.) when entries are collapsed.

Get "Fail to retrieve info" for default VDOM link on the GUI Interfaces page.

Hardware Switch Row is shown, indicating a number of interfaces but without any interfaces below.

Inconsistent reference count when using ports in HA session-sync-dev.

When creating an antispam block/allow list entry, Mark as Reject should be grayed out.

The SSID dialog page does not have support for the new MAC address filter.

Gets "Fail to retrieve info" for ha-mgmt-interface on GUI > interface page.

GUI does not display the status for VLAN and loopback under status column at Network > interfaces.

Log viewer forwarded traffic does not support multiple filters for one field.

In Log & Report, filtering for blank values (None) always show no results.

When sending CSF proxied request, segfault happens (httpsd crashes) if FortiExplorer accesses root FortiGate via management tunnel.

Change/remove FortiCloud standalone reference.

New interface pair consolidated policy added via CLI is not displayed on GUI policy page.

Empty firmware version in managed FortiSwitch from FortiGate GUI.

Internal Server Error while trying to create new interface.

Email filter page keeps loading and cannot create a new profile when the VDOM admin only has emailfilter permission.

Application and filter overrides issues.

VPN event logs shows incorrectly when adding two action filters and if the filter action filter contains "-".

Enable/disable Disarm and Reconstruction on GUI only takes effect on SMTP protocol in AV profile.

When logged in as administrator with web filter read/write only privilege, the Web Rating Overrides GUI page cannot load.

WAN Opt. Monitor displays Total Savings as negative integers during file transfers.

Option to reset statistics from Monitor > WAN Opt. Monitor in GUI does not clear the counters.

In HA, management-ip that is set on hardware switch interface is not responding to ping after

executing reboot.

HA failing config sync on VM01 with error (primary and secondary have different hdisk status) when primary is pre-configured.

HA secondary unit sending out GARP packets in 16-20 seconds after HA monitored interface failed.

FG-3400E hasync reports the "Network is unreachable".

Multiple PPPoE connections on a single interface does not sync PPPoE dynamic assigned IP and cannot start re-negotiation.

IPS engine 5.00027 has several singal 11 crashes on QA_FW.

IPS intelligent mode not working when reflect sessions are created on different physical interfaces.

The CPU consumption of ipsengine gets high with customer configuration file.

IPS engine 5.00035 has signal 11 crash.

When IPS pcap is enabled, traffic is intermittently disrupted after disk I/O reaches IOPS limit.

No traffic log after reducing miglogd child to 1.

Log viewer application control cannot show any logs (page is stuck loading) .

Log filter can return empty result when there are too many logs, but the filter result is small.

When refreshing logs in GUI, some log_se processes are running extremely long and consuming CPU.

Logs to syslog server configured with FQDN addresses fail when the DNS entry gets updated for the FQDN address.

Miglogd still uses the daylight savings time after the daylight savings end.

GUI shows 401 Unauthorized error when downloading forward traffic logs with the time stamp as the filter criterion.

Policy in proxy-based mode with AV and WAF profile denies access to Nginx with enabled gzip compression.

WAD is crashing with signal 6 in wad_fmem_free when processing SMB2/CIFS.

WAD crash for wad_ssl_port_on_ocsp_notify.

In case of TLS 1.3 with certificate inspection and a certificate with an empty CN name, WAD workers would locate a random size for CN name and then cause unexpected high memory usage in WAD workers.

Potential memory leak that will be triggered by certificate inspection CIC connection in WAD.

Slow download speed in proxy-based mode compared to flow-based mode.

Routing monitor policy view cannot show source and destination data for SD-WAN route and wildcard destination.

Routing table is not always updated when BGP gets an update with changed next hop.

Unable to create the IPsec VPN directly in Network > SD-WAN.

PPPoE interface bandwidth is mistakenly calculated as 0 in SD-WAN.

Security Fabric widget keep loading when FortiSwitch is in a loop or two FortiSwitches are in mclag mode.

Invalid CIDR format shows as valid by Security Fabric threat feed.

ACI SDN connector dynamic address cannot be resolved.

Cannot fully load a website through SSL VPN bookmark.

An SSL VPN bookmark failed to load the GUI of proxmox GUI interface.

When the SSL VPN portal theme is set to red, the style is lost in the SSL VPN portal.

SAML login is not stable for SSL VPN, it requires restarting sslvpnd to enable the function.

https://outlook.office365.com cannot be accessed in SSLVPN web portal.

sslvpnd crashed on FortiGate.

SSL VPN bookmark does not load Google Maps on internal server.

Cannot access HTTPS bookmark, get a blank page.

Cannot access https://cdn.i-ready.com through SSL VPN web portal.

Internal website not working in SSL VPN web mode.

The latest FortiOS GUI does not render when accessing it by the SSL VPN portal.

Adding factory-reset device to HA fails with switch-controller.qos settings in root.

GUI should add support to allow using switch VLAN interface under a tenant VDOM on a managed switch VDOM.

TCP traffic with tcp_ecn tag cannot go through ipip IPv6 tunnel with NP6 offload enabled.

FortiGuard filtering services show as unavailable for read-only admin.

HPE does not protect against DDoS attacks like flood on IKE and BGP destination ports.

Aggregate link does not work for LACP mode active for 60E internal ports, but works for wan1 and wan2 combination.

RX/TX counters for VLAN interfaces based on LACP interface are 0.

Making a change to a policy with inline editing is very slow with large table sizes.

ASIC offloading sessions sticking to interfaces after SD-WAN SLA interface selection.

FortiManager Cloud cannot be removed once the FortiGate has trouble on contract.

Session clash event log found on FG-6500F when passing a lot of same source IP ICMP traffic over Load balance VIP.

Script to purge and re-create a local-in-policy ran against the remote FortiGate directly (in the CLI) is causing auto-update issues.

GUI cannot show default Fortinet logo for replacement messages.

FortiGate returns invalid configuration during FortiManager retrieving configuration.

system local dns instead of DNS setting acquired from upstream DHCP server was assigned to client under management-vdom.

alertemail username length cannot go beyond 35 characters.

Dedicated management CPU running on high CPU (soft IRQ).

OID for the IPsec VPN phase 2 selector only displays the first one on the list.

FortiGate is not sending DHCP request after receiving offer.

FortiGate accepts invalid configuration from FortiManager.

Communication over PPPoE fails after installing PPPoE configuration from FortiManager.

Unable to execute ping6 when configuring execute ping6-options tos except for default.

Invalid multicast policy created after transparent VDOM restored.

Constant DHCPD crashes.

Some of the clients are not getting their IP through DHCP intermittently.

DHCPv6 relay does not work on FG-2200E.

Locally-originated DHCP relay traffic on non-default VRF may follow route on VRF 0.

Mobile token authentication does not work for SSL VPN on SOC3 platforms.

Affected models include: FG-60E, FG-60E-POE, FG-61E, FG-80E, FG-80E-POE, FG-81E, FG-81E-POE, FG-100E, FG-100EF, FG-101E, FG-140E, FWF-60E, FWF-61E.

RADIUS state attribute truncated in access request when using third-party MFA (ping ID).

Client PC matching multiple authentication methods (firewall, FSSO, RSSO, WSSO) may not be matched to NGFW policies correctly.

Device identification via LLDP on an aggregate interface does not work.

Guest user log in expires after first log in and no longer works; user is not removed from the firewall authentication list after the set time.

gui-wanopt cache missing under system settings after upgrading a FortiGate VM with two disks.

vMotion tasks cause connections to be dropped as sessions related to vMotion VMs do not appear on the destination VMX.

Should replace GUI option to register to FortiCare from AWS PAYG with link to portal for registration.

EIP does not failover if the primary FortiGate is rebooted or stopped from the Alibaba Cloud console.

FGCP cluster member reboots in infinite loop and hatalk daemon dumps the core with segmentation fault.

FG-VM image unable to be deployed on AWS with additional disk of type HDD(st1).

Azure SDN connector unable to connect to Azure Kubernetes integrated with AAD.

FG-VM-LENC unable to validate new license.

Azure FortiGate crashing frequently when MLX4 driver RX jumbo fail.

VLAN not working on fgtvm-hv on hyper-v.

Azure FortiGate-VM (BYOL) unable to boot up when loading a lower vCPU license than the instance's vCPU.

Azure autoscale not syncing after upgrading to 6.2.2.

Alibaba Cloud: multiple VPC route entries fail to switch when HA fails over.

If central-management server is set to FortiManager IP address and FortiGuard update-server-location is set to usa, the FOS-VM is able to get web filter license and server list from FortiManager, but the GUI shows the service availability as down.

Azure SDN connector replicates configuration from primary unit to secondary unit during configuration restore.

VoIPd process crash.

When editing a FortiAP profile on the FortiGate web UI, the previously selected SSID group(s) cannot be displayed.

WPA2-Enterprise SSID should support acct-all-servers setting in RADIUS to send accounting messages to all servers.

FAP unable to connect to FortiGate via IPsec VPN tunnel with DTLS policy (clear text).

FortiOS GUI cannot support FAP-U431F and FAP-U433F profiles.

Workaround: Edit the wtp-profile for FAP-U431F and FAP-U433F in the CLI.

cw_acd crashes multiple times.