Known issues
The following issues have been identified in version 7.0.8. To inquire about a particular bug or report a bug, please contact Customer Service & Support.
Endpoint Control
Bug ID |
Description |
---|---|
730767 |
The new HA primary FortiGate cannot get EMS Cloud information when HA switches over. Workaround: delete the EMS Cloud entry then add it back. |
Firewall
Bug ID |
Description |
---|---|
860480 |
FG-3000D cluster kernel panic occurs when upgrading from 7.0.5 to 7.0.6 and later. |
861990 |
Increased CPU usage in softirq after upgrading from 7.0.5 to 7.0.6. |
GUI
Bug ID |
Description |
---|---|
440197 |
On the System > FortiGuard page, the override FortiGuard server for AntiVirus & IPS Updates shows an Unknown status, even if the server is working correctly. This is a display issue only; the override feature is working properly. |
677806 |
On the Network > Interfaces page when VDOM mode is enabled, the Global view incorrectly shows the status of IPsec tunnel interfaces from non-management VDOMs as up. The VDOM view shows the correct status. |
685431 |
On the Policy & Objects > Firewall Policy page, the policy list can take around 30 seconds or more to load when there is a large number (over 20 thousand) of policies. Workaround: use the CLI to configure policies. |
707589 |
System > Certificates list sometimes shows an incorrect reference count for a certificate, and incorrectly allows a user to delete a referenced certificate. The deletion will fail even though a success message is shown. Users should be able to delete the certificate after all references are removed. |
708005 |
When using the SSL VPN web portal in the Firefox, users cannot paste text into the SSH terminal emulator. Workaround: use Chrome, Edge, or Safari as the browser. |
719476 |
FortiLink NAC matched device is displayed in the CLI but not in the GUI under WiFi & Switch Controller > NAC Policies > View Matched Devices. |
755177 |
When upgrade firmware from 7.0.1 to 7.0.2, the GUI incorrectly displays a warning saying this is not a valid upgrade path. |
810225 |
An undefined error is displayed when changing an administrator password for the first time. Affected models: NP7 platforms. |
831885 |
Unable to access GUI via HA management interface of secondary unit. |
853352 |
On the View/Edit Entries slide-out pane (Policy & Objects > Internet Service Database dialog), users cannot scroll down to the end if there are over 100000 entries. |
HA
Bug ID |
Description |
---|---|
818432 |
When private data encryption is enabled, all passwords present in the configuration fail to load and may cause HA failures. |
Hyperscale
Bug ID |
Description |
---|---|
795853 |
VDOM ID and IP addresses in the IPL table are incorrect after disabling EIF/EIM. |
807476 |
After packets go through host interface TX/RX queues, some packet buffers can still hold references to a VDOM when the host queues are idle. This causes a VDOM delete error with |
811109 |
FortiGate 4200F, 4201F, 4400F, and 4401F HA1, HA2, AUX1, and AUX2 interfaces cannot be added to an LAG. |
836976 |
Sessions being processed by hyperscale firewall policies with hardware logging may be dropped when dynamically changing the |
838654 |
Hit count not ticking for implicit deny policy for hardware session in case of NAT46 and NAT64 traffic. |
839958 |
|
842659 |
|
843197 |
Output of |
843266 |
Diagnose command should be available to show |
843305 |
Get |
844421 |
The |
846520 |
NPD/LPMD process killed by out of memory killer after running mixed sessions and HA failover. |
IPsec VPN
Bug ID |
Description |
---|---|
761754 |
IPsec aggregate static route is not marked inactive if the IPsec aggregate is down. |
810833 |
IPsec static router gateway IP is set to the gateway of the tunnel interface when it is not specified. |
822651 |
NP dropping packet in the incoming direction for SoC4 models. |
Proxy
Bug ID |
Description |
---|---|
727629 |
An error case occurs in WAD while handling the HTTP requests for an explicit proxy policy. |
837095 |
WAD daemon runs high with many child processes and is not coming down after configuring 250 CGN VDOMs. |
Security Fabric
Bug ID |
Description |
---|---|
614691 |
Slow GUI performance in large Fabric topology with over 50 downstream devices. |
794703 |
Security Rating report for Rogue AP Detection and FortiCare Support checks show incorrect results. |
825291 |
Security rating test for FortiAnalyzer fails when connected to FortiAnalyzer Cloud. |
SSL VPN
Bug ID |
Description |
---|---|
819754 |
Multiple DNS suffixes cannot be set for the SSL VPN portal. |
852566 |
User peer feature for one group to match to multiple user peers in the authentication rules is broken. |
System
Bug ID |
Description |
---|---|
724085 |
Traffic passing through an EMAC VLAN interface when the parent interface is in another VDOM is blocked if NP7 offloading is enabled. Workaround: set the |
799570 |
High memory usage occurs on FG-200F. |
812957 |
When setting the |
847077 |
|
847314 |
NP7 platforms may encounter random kernel crash after reboot or factory reset. |
850430 |
DHCP relay does not work properly with two DHCP relay servers configured. |
850683 |
Console keeps displaying |
850688 |
FG-20xF system halts if setting |
855573 |
False alarm of the PSU2 occurs with only one installed. |
859717 |
The FortiGate is only offering the Workaround: factory reset the FortiGate, then restore the same configuration without making any changes to the configuration. |
882187 |
Optimize memory usage caused by the high volume of disk traffic logs. |
883071 |
Kernel panic occurs due to null pointer dereference. |
884023 |
When a user is logged in as a VDOM administrator with restricted access and tries to upload a certificate (System > Certificates), the Create button on the Create Certificate pane is greyed out. |
Upgrade
Bug ID |
Description |
---|---|
850691 |
The Workaround: upgrade from FortiOS 6.4.x to 7.0.7 and then 7.0.8. If you have already upgraded to FortiOS 7.0.8, reboot the FortiGate to automatically set |
854550 |
After upgrading to 7.0.8, |
User & Authentication
Bug ID |
Description |
---|---|
765184 |
RADIUS authentication failover between two servers for high availability does not work as expected. |
Web Filter
Bug ID |
Description |
---|---|
766126 |
Block replacement page is not pushed automatically to replace the video content when using a video filter. |
ZTNA
Bug ID |
Description |
---|---|
848222 |
ZTNA TCP forwarding is not working when a real server is configured with an FQDN address type. An FQDN address type that can resolve public IPs is not recommended for ZTNA TCP forwarding on real servers because the defined internal DNS database zone is trying to override it at the same time. By doing so, the internal private address may not take effect after rebooting, and causes a ZTNA TCP forwarding failure due to the real server not being found. |