Changes in default behavior

Bug ID	Description
518983	When upgrading from previous FortiOS 6.2 versions to 6.4.0, the default WTP profiles with zero reference are deleted. In FortiOS 6.4.0, the default WTP profiles are not created by default until a FortiAP is added by discovery or manually.
537354	Interface egress shaping offload to NPU when `shaping-offload` is enabled.
573065	Command exe log roll only rolls disk log, no matter what device filter is set.
587579	Implement third-party certificate verification and OCSP stapling check for all FortiGuard servers connected from FortiOS. Make `fortiguard-anycast` enabled by default and through upgrading.
588583	Allow user set gateway when they use VPN IPsec static and remote IP is empty.
593122	CSF root FortiGate SDN connector and automation settings will not be synced down to CMDB in CSF downstream FortiGate anymore.
598320	In a scenario where there are duplicate entries of `config icap server` with a duplicate combination of `ip-addresss`, `ip-version`, and `port`, the duplicate `config icap server` entries must be removed and replaced in the source data configuration (`config icap profile`). This step needs to be performed before upgrading in case of configuration loss.
601413	Change `set interface` setting under SD-WAN member as an optional configuration.
616158	While hovering over an IP address on different GUI pages (such as Log & Report, Fabric Connectors, and others), a tooltip informs users of additional information for the IP such as its country, location, owner, resolved domains, etc.

Bug ID

Description

518983

When upgrading from previous FortiOS 6.2 versions to 6.4.0, the default WTP profiles with zero reference are deleted.

In FortiOS 6.4.0, the default WTP profiles are not created by default until a FortiAP is added by discovery or manually.

537354

Interface egress shaping offload to NPU when shaping-offload is enabled.

573065

Command exe log roll only rolls disk log, no matter what device filter is set.

587579

Implement third-party certificate verification and OCSP stapling check for all FortiGuard servers connected from FortiOS. Make fortiguard-anycast enabled by default and through upgrading.

588583

Allow user set gateway when they use VPN IPsec static and remote IP is empty.

593122

CSF root FortiGate SDN connector and automation settings will not be synced down to CMDB in CSF downstream FortiGate anymore.

598320

In a scenario where there are duplicate entries of config icap server with a duplicate combination of ip-addresss, ip-version, and port, the duplicate config icap server entries must be removed and replaced in the source data configuration (config icap profile). This step needs to be performed before upgrading in case of configuration loss.

601413

Change set interface setting under SD-WAN member as an optional configuration.

616158

While hovering over an IP address on different GUI pages (such as Log & Report, Fabric Connectors, and others), a tooltip informs users of additional information for the IP such as its country, location, owner, resolved domains, etc.

FortiOS Release Notes

Changes in default behavior

Changes in default behavior

Changes in default behavior