Get internet service name configuration error on version 7.01011 when FortiGate reboots or upgrades.

FortiGate cannot get detailed information on FortiClient vulnerabilities from FortiAnalyzer.

Managed FortiSwitch and FortiSwitch Ports pages cannot load when there is a large number of managed FortiSwitches.

Warning message is not displayed when a user configures an interface with a static IP address that is already in use.

Managed FortiSwitch and FortiSwitch Ports pages are slow to load when there are many managed FortiSwitches.

When the client browser is in a different time zone from the FortiGate, the Guest Management page displays an incorrect expiry time for guest users. The CLI returns the correct expiry.

GUI cannot change action for the web-based email category in DNS filter profile.

On the System > HA page, GUI tooltip for the reserved management interface incorrectly shows

the connecting IP address instead of the configured IP address.

Editing the LDAP server in the GUI removes the line set server-identity-check disable from the configuration.

Connectivity test for RADIUS server using CHAP authentication always returns failure.

GUI incorrectly displays the warning, Botnet package update unavailable, AntiVirus subscription not found., when the antivirus entitlement is expiring within 30 days. The actual botnet package update still works within the active entitlement duration.

Log Details does not resize the log columns and covers existing log columns.

When multiple favorite menus are configured, the new features video pops up after each GUI login, even though user previously selected Don't show again.

When editing the Poll Active Directory Server page, the configured LDAP server saved in FSSO polling is not displayed. Users must use the CLI to modify the setting.

Disclaimer users are not shown in the user monitor; they must be displayed in the CLI with diagnose firewall auth list.

FortiGuard DDNS setting incorrectly displays truncated unique location and empty server selection after saving changes.

After performing a search on firewall Addresses, the matched count over total count displayed for each address type shows an incorrect total count number. The search functionality still works correctly.

GUI does not redirect to the system reboot progress page after successfully restoring a configuration.

Some FortiView graphs and drilldown views show empty data due to filtering issue. Affected graphs/views: Top System Events, Top Authentication Failures, Policy View, and Compromised Host View.

The Applications and Destinations tabs on the Diagnostic and Tools pane show the same data for different clients on the WiFi Clients monitor page.

The list of firewall schedules displays time based on the browser time, even though the global time preference is set to use the FortiGate system time. The Edit Schedule page does not have this issue.

On SSL-VPN Settings page, the option to send an SSL VPN configuration to a user for FortiClient provisioning does not support showing a domain name for the VPN gateway.

GUI interface bandwidth widget does not show correct data for tunnel interface when ASIC offload is enabled on the firewall policy.

LAG does not come up after link failed signal is triggered.

Unable to contact TACACS+ server when using HA dedicated management interface in 6.4.3.

Wrong direction and banned location by quarantine action for ICMP.Oversized.Packet in NGFW policy mode.

OCVPN spoke-to-spoke communication intermittently fails with mixed topology where some spokes have two ISPs and some have one, but the hubs have two.

Unable to route traffic to a spoke VPN site from the hub FortiGate when the dialup IPsec VPN interface is dual stacked (IPv4/IPv6).

Packets for the existing session are still forwarded via the old tunnel after the routing changed on the ADVPN hub.

Firewall policy with UTM in proxy mode breaks SSL connections in active-active cluster.

SD-WAN IPv6 route tag command is not available in the SD-WAN services.

Slow GUI performance in large Fabric topology with over 50 downstream devices.

Internal website, http://gd***.local/share/page?pt=login, log in page does not load in SSL VPN web mode.

When matching multiple SSL VPN firewall policies, SSL VPN checks the group list from bottom to top, and the user is mapped to the incorrect portal.

Interface emac-vlan feature does not work on SoC4 platform.

Support FortiManager when private-data-encryption is enabled in FortiOS.

A large number of detected devices causes httpsd to consume resources, and causes low-end devices to enter conserve mode.

FG-101F crashed and rebooted when adding vlan-protocol 8021ad VLAN.

ARM-based platforms do not have sensor readings included in SNMP MIBs.

Policy package push from FortiManager fails the first time, and succeeds the second time if it is blank or has no changes.

Offloaded traffic from IPsec crossing the NPU VDOM link is dropped.

Empty firewall objects after pushing several policy deletes.

radius-vdom-override and accprofile-override do not work when administrator has 2FA enabled.

Azure SDN connector replicates configuration from primary device to secondary device during configuration restore.

FG-VMX manager not showing all the nodes deployed.

Autoscale GCP health check is not successful (port 8443 HTTPS).

During every FortiGuard UTM update, there is high CPU usage because only one vCPU is available.

Hot adding multiple CPUs at once to Xen-flavored VMs can result in a kernel panic crash.

Workaround: add one CPU at a time. Alternatively, shut down the VM, add the CPUs, and restart the VM.

FG-VM64-AZURE-PAYG license/serial number get lost after downgrading to 6.2.6 from 6.4.3.

Client traffic was dropped by CAPWAP offloading when it connected from a mesh leaf Forti-AP managed by a FWF-61F local radio.

CAPWAP tunnel traffic is dropped when offloading is enabled (with FAP managed by a VLAN interface). There are three workarounds:

• Disable capwap-offload in system npu and reboot.

• Set dtls-policy dtls enabled in wireless-controller wtp-profile. This may cause traffic to slow.

• Enable UTM in the firewall policy (does not require reboot). This workaround cannot be applied on NP6Xlite FortiGates (FG-6xF and FG-10xF).

  config firewall policy
      edit <id>
          set utm-status enable
          set ssl-ssh-profile "certificate-inspection"
          set av-profile "g-default"
      next
  end

CAPWAP traffic drops on FG-300E when FortiAP is managed by VLAN interface.