Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

FortiOS Release Notes

Changes in CLI

Bug ID

Description

645241

Remove prp-port-out and prp-port-in settings from system npu and replace with the following:

config system npu setting prp
    set prp-port-in port-list
    set prp-port-out port-list
end

688989

Change username-case-sensitivity option to username-sensitivity. This new option includes both case sensitivity and accent sensitivity. When disabled, both case and accents are ignored when comparing names during matching:

config user local
    edit <name>
        set username-sensitivity {enable | disable}
    next
end

693347

Restrict IPv6 pools address and IPv6 split tunneling routing address to be IP mask or range type only so SSL VPN can support EMS tag dynamic addresses:

config vpn ssl web portal
    edit <name>
        set ipv6-pools <address>
        set ipv6-split-tunneling-routing-address <address>
    next
end

Changes in CLI

Bug ID

Description

645241

Remove prp-port-out and prp-port-in settings from system npu and replace with the following:

config system npu setting prp
    set prp-port-in port-list
    set prp-port-out port-list
end

688989

Change username-case-sensitivity option to username-sensitivity. This new option includes both case sensitivity and accent sensitivity. When disabled, both case and accents are ignored when comparing names during matching:

config user local
    edit <name>
        set username-sensitivity {enable | disable}
    next
end

693347

Restrict IPv6 pools address and IPv6 split tunneling routing address to be IP mask or range type only so SSL VPN can support EMS tag dynamic addresses:

config vpn ssl web portal
    edit <name>
        set ipv6-pools <address>
        set ipv6-split-tunneling-routing-address <address>
    next
end