Fortinet black logo

FortiOS Release Notes

Home FortiGate / FortiOS 7.0.4 FortiOS Release Notes

Changes in default behavior

7.0.4
7.4.3
7.4.2
7.4.1
7.4.0
7.2.8
7.2.7
7.2.6
7.2.5
7.2.4
7.2.3
7.2.2
7.2.1
7.2.0
7.0.15
7.0.14
7.0.13
7.0.12
7.0.11
7.0.10
7.0.9
7.0.8
7.0.7
7.0.6
7.0.5
7.0.4
7.0.3
7.0.2
7.0.1
7.0.0
6.4.15
6.4.14
6.4.13
6.4.12
6.4.11
6.4.10
6.4.9
6.4.8
6.4.7
6.4.6
6.4.5
6.4.4
6.4.3
6.4.2
6.4.1
6.4.0
6.2.16
6.2.15
6.2.14
6.2.13
6.2.12
6.2.11
6.2.10
6.2.9
6.2.8
6.2.7
6.2.6
6.2.5
6.2.4
6.2.3
6.2.2
6.2.1
6.2.0
6.0.18
6.0.17
6.0.16
6.0.15
6.0.14
6.0.13
6.0.12
6.0.11
6.0.10
6.0.9
6.0.8
6.0.7
6.0.6
6.0.5
6.0.4
6.0.3
6.0.2
6.0.1
6.0.0
5.6.14
5.6.13
5.6.12
5.6.11
5.6.10
5.6.9
5.6.8
5.6.7
5.6.6
5.6.5
5.6.4
5.6.3
5.6.2
5.6.1
5.6.0
5.4.13
5.4.12
5.4.11
5.4.10
5.4.9
5.4.8
5.4.7
5.4.6
5.4.5
5.4.4
5.4.3
5.4.2
5.4.1
5.4.0
5.2.15
5.2.14
5.2.13
5.2.12
5.2.11
5.2.10
5.2.9
5.2.8
5.2.7
5.2.6
5.2.5
5.2.4
5.2.3
5.2.2
5.2.1
5.2.0
5.0.14
5.0.13
5.0.12
5.0.11
5.0.10
5.0.9
5.0.8
5.0.7
5.0.6
5.0.5
5.0.4
5.0.3
5.0.2
Copy Link
Copy Doc ID 807880d0-7f0e-11ec-a0d0-fa163e15d75b:230510
Download PDF

Changes in default behavior

Bug ID

Description

718290

When using FortiGuard servers for DNS, FortiOS will default to using DNS over TLS (DoT) to secure the DNS traffic. New FortiGuard DNS servers are added as primary and secondary servers.

748811

Accept MTU in ICMP fragmentation needed for ESP packets. In the IPsec phase 2 settings, if ipv4-df is enabled, the DF flag in the new IP header is set to the same as the original IP header. If ipv4-df is disabled, the DF flag in the new IP header is set to 0.

759012

The default DNS servers have changed, and the default setting is to use DoT and SDNS.
Previous
Next

Changes in default behavior

Bug ID

Description

718290

When using FortiGuard servers for DNS, FortiOS will default to using DNS over TLS (DoT) to secure the DNS traffic. New FortiGuard DNS servers are added as primary and secondary servers.

748811

Accept MTU in ICMP fragmentation needed for ESP packets. In the IPsec phase 2 settings, if ipv4-df is enabled, the DF flag in the new IP header is set to the same as the original IP header. If ipv4-df is disabled, the DF flag in the new IP header is set to 0.

759012

The default DNS servers have changed, and the default setting is to use DoT and SDNS.
Previous
Next