On the System > FortiGuard page, the override FortiGuard server for AntiVirus & IPS Updates shows an Unknown status, even if the server is working correctly. This is a display issue only; the override feature is working properly.

Managed FortiSwitch and FortiSwitch Ports pages are slow to load when there are many managed FortiSwitches.

The web page cannot be found is displayed when a dashboard ID no longer exists.

Workaround: load another page in the navigation pane. Once loaded, load the original dashboard page (that displayed the error) again.

GUI interface bandwidth widget does not show correct data for tunnel interface when ASIC offload is enabled on the firewall policy.

When there are a lot of historical logs from FortiAnalyzer, the FortiGate GUI Forward Traffic log page can take time to load if there is no specific filter for the time range.

Workaround: provide a specific time range filter, or use the FortiAnalyzer GUI to view the logs.

The hatalk process crashed when creating a disabled VLAN interface in an A-P cluster.

ISDB is not updating; last update attempt is stuck at an older date.

Sessions not synchronized to HA secondary on an FGSP and FGCP combined setup.

FGSP does not synchronize the helper-pmap expectation session.

In the GUI, an FQDN or ISDB can be selected for a DoS policy, which is not supported (an error message appears). The CLI shows the correct options.

The timestamp on the hyperscale SPU of a deny policy (policy id 0) is incorrect.

A few tasks are hung on issuing stat verbose on the secondary device.

VDOM ID and IP addresses in the IPL table are incorrect after disabling EIF/EIM.

Traffic shaping profile does not seem to have an effect on TCP/UDP traffic in hyperscale.

Large client IP range makes fixed allocation usage relatively limited.

Wrong direction and banned location by quarantine action for ICMP.Oversized.Packet in NGFW policy mode.

Implementing the route-overlap setting on phase 2 configurations brings tunnels down until a reboot is not performed on the FGSP cluster.

IKE crashes after HA failover when the enforce-unique-id option is enabled.

WAD process with SoC SSL acceleration enabled consumes more memory usage over time, which may lead to conserve mode.

Workaround: disable SoC SSL acceleration under the firewall SSL settings.

Application wad crash (Segmentation fault) , which is the first crash in a series.

Secure SD-WAN Monitor in FortiAnalyzer does not show graphs when the SLA target is not configured in SD-WAN performance SLA.

Forward traffic log does not generate logs for HTTP and HTTPS services with SSL VPN web mode.

When NTurbo is enabled, it is unexpectedly provided with the wrong traffic direction information (from server or from client) to decide the destination for the data. This causes the traffic to be sent back to the port where it came from.

The extender daemon crashes on Low Encryption (LENC) FortiGates.

L2TP tunnel is not removed after Android client VPN disconnects.

Link status on peer device is not down when the admin port is down on the FortiGate.

A VWP named .. can be created in the GUI, but it cannot be edited or deleted.

VXLAN VNI interface cannot be used with a hardware switch.

SFP port with 1G copper SFP always is up.

FortiGate did not restart after restoring the backup configuration via FortiManager after the following process: disable NPU offloading, change NGFW mode from profile-based to policy-based, retrieve configuration from FortiGate via FortiManager, and install the policy package via FortiManager.

Local certificates could not be saved properly, which caused issues such as not being able to properly restore them with configuration files and causing certificates and keys to be mismatched.

Traffic passing through an EMAC VLAN interface when the parent interface is in another VDOM is blocked if NP7 offloading is enabled. If auto-asic-offload is disabled in the firewall policy, then the traffic flows as expected.

Random LTE modem disconnections due to certain carriers getting unstable due to WWAN modem USB speed under super-speed.

FortiAnalyzer serial number automatically learned from miglogd does not send it to FortiManager through the automatic update.

DoS offload does not work in 6.4.9 and the npd daemon keeps crashing if the policy-offload-level is set to dos-offload under config system npu. Affected platforms: NP6XLite.

Traffic loss occurs when running SNAT PBA pool in a hyperscale VDOM. The NP7 hardware module PRP got stuck, which caused the NP7 to hang.

Running diagnose hardware deviceinfo psu shows the incorrect PSU slot.

Null pointer causing kernel crash on FWF-61F.

Can't find xitem. Drop the response. error appears for DHCPOFFER packets in the DHCP relay debug.

SCEP fails to renew if the local certificate name length is between 31 and 35 characters.

Azure SDN connector replicates configuration from primary device to secondary device during configuration restore.

FG-VMX manager not showing all the nodes deployed.

Autoscale GCP health check is not successful (port 8443 HTTPS).

During every FortiGuard UTM update, there is high CPU usage because only one vCPU is available.