Fortinet black logo

Known issues

Copy Link
Copy Doc ID e87f9538-40df-11e9-94bf-00505692583a:605244
Download PDF

Known issues

The following issues have been identified in FortiIsolator version 1.1.0. For inquiries about a particular bug or to report a bug, visit the Fortinet Support website.

Bug ID

Description

539482

In the FortiIsolator CLI, the "invalid value of internal gateway ip" error message that appears when you do not use the set mgmt-gw command correctly, needs to be updated.

539091

When you click the Online Help option in the FortiIsolator GUI, a Not Found error message is displayed.

537736

When you try to access the FortiIsolator GUI in Internet Explorer, a JavaScript error message may appear and the page will not open.

536768

When you install FortiIsolator VM for KVM, and select VirtIO disk as the second hard disk, the VirtIO disk may not mount and the installation fails.

536685

When high availability is enabled on FortiIsolator, in IP forwarding or proxy modes, when you browse to a webpage, a Webpage Load Error message may appear and the webpage will not open.

535590

When you enable high availability for the first time, after the FortiIsolator restarts and you browse to a webpage in IP forwarding mode, a Service Unavailable error message may appear and the webpage will not load.

Workaround: Restart the FortiIsolator a second time.

533640

When FortiIsolator is in a high availability cluster where there is one master host and one slave host, when you change the priority number of the slave host to make it the master host, the HA Cluster Information for the new master host in the FortiIsolator GUI may not display that there is a slave host in the Number of Slave field (the value is 0 instead of 1).

530412

After the license for FortiIsolator VM for KVM expires, you may still be able to access sites, up to the maximum number of supported sessions.

529790

After you have updated and saved the gateway settings a few times in the FortiIsolator GUI (Network > System Routing), you may not be able to update and save the gateway settings again.

529718

The system monitor script only checks if the server is running, and does not check the httpd or fis_daemon processes.

Workaround: Use the ps command to check for the processes. If the processes do not exist, restart FortiIsolator.

528463

If your browser does not have the FortiIsolator certificate installed, when you browse to a webpage in IP forwarding mode, you are prompted to install the certificate. If the certificate is installed in the Server tab in the Certificate Manager, when you try to browse to a webpage, a blank page may be displayed instead.

526060

When you browse to secure websites (HTTPS), an icon indicating that the connection or website is not secure may be displayed.

525329

In the System Routing page (Network > System Routing) in the FortiIsolator GUI, when you edit and save the gateway settings, the gateway settings may be deleted.

524787

When you set the date and time settings for FortiIsolator to a value that is earlier than the FortiIsolator installation date and time, it causes the certificate to be invalid and when you try to browse to a webpage, a Webpage Load Error message appears and the webpage will not open.

Workaround: Your administrator can manually update or restore the certificate files (for example, through the web portal) instead of allowing FortiIsolator to automatically update the certificate files.

522086

Sometimes when you try to log in to the FortiIsolator GUI, especially following a FortiIsolator restart, your browser may remain on the login page, instead of displaying the FortiIsolator Dashboard.

521408

For upstream proxy traffic from a FortiGate to FortiIsolator, when you browse to a webpage, the FortiIsolator certificate may not work properly and an error message appears stating that parts of the page, such as images, are not secure.

518319

When a FortiGate is in transparent proxy mode, it sends connection requests with the IP address of the destination website. FortiIsolator is using this IP address to sign the HTTPS interception certificate, which is not recognized by web browsers. FortiIsolator should extract the domain name from the SSL server name indication extension instead.

518192

When you scroll quickly up and down webpages, high quality images may not display correctly (partial images or rendering delays).

518188

In IP forwarding mode, when you browse to some webpages, a Webpage Load Error message may appear and the webpage will not open.

516860

FortiIsolator may not work correctly on iOS devices.

516731

FortiIsolator traffic should be forced to go to the Internet through the external interface, but it may use the internal interface instead.

516694

When you try to change the IP addresses of interfaces in the FortiIsolator GUI, an "Error happened. Please check your interface settings" error message may appear.

Workaround: Use the FortiIsolator CLI to change the IP addresses of interfaces.

515558

In the FortiIsolator GUI, after you upload a license using the Upload License option in the System Information widget on the Dashboard, information about the license, such as the VM serial number, may not be displayed.

Workaround: View the license information in the FortiIsolator CLI.

515546

In the FortiIsolator GUI, after you back up the system configuration, the System Configuration field in the System Information widget on the Dashboard may show N/A instead of the date and time of the last backup.

515535

When you upload a license, the FortiIsolator GUI may continue to display the "Uploading VM license file, please do not interrupt" message even after the upload is done.

515516

FortiIsolator does not support hard disk file types for Oracle VM VirtualBox OVF (VDI, VHD, VMDK, HDD, QCOW, and QED). When you try to configure these virtual hard disk types, the hard disk will not mount and the new configuration is lost after FortiIsolator restarts.

510103

When you try to sign in to Skype in a browser, authentication may not work and you cannot log in.

508924

When the browser redirects to a FortiGate login page that is using the default built-in certificate, FortiIsolator cannot verify the server domain name, and a blank screen is displayed instead of the login page.

508672

When you browse to webpages that contain JPEG files, the images may appear broken as you scroll up and down the webpage.

506858

In some browsers, when you browse to webpages that contain JPEG files, the images may not display and white space is displayed instead.

505602

When you browse to some webpages, the browser scrollbar may not work.

504781

If the date and time of the FortiIsolator certificate generation is later than the current date and time, it may cause certificate errors and you will not be able to browse to webpages.

Workaround: Set the FortiIsolator certificate date and time to a value that is earlier than the system time.

504515

In the FortiIsolator CLI, after you configure some TFTP parameters, such as local IP address, subnet mask, and gateway, the parameters may still display as not configured (N/A).

498958

When a webpage requires LDAP authentication (single sign-on) that involves multiple browser windows, authentication may not work and the browser freezes.

497139

When you try to use the scroll wheel on a mouse to zoom in and out on webpages (for example, on a map), the zooming may not work.

490166

After you set up a proxy server and import the FortiIsolator certificate into a browser, a "SECURITY_ERR, Cross zone connection not allowed" error may display.

486407

When FortiIsolator is installed, video chat websites may not work properly.

486373

FortiIsolator may not work correctly in the Safari web browser on iOS devices.

486371

FortiIsolator may not work on Android devices.

486130

When FortiIsolator is installed, you cannot access an FTP server from the browser.

485782

You may not be able to download the Skype application in some browsers.

485574

On macOS, you may not be able to type inside the Google search bar in the Safari web browser.

484804

When you browse to a webpage, there may be a slight delay before the webpage loads in some browsers.

472800

FortiIsolator may not work correctly on iOS devices.

452340

On iOS devices, when you touch the input areas on webpages, the keyboard may not appear.

Known issues

The following issues have been identified in FortiIsolator version 1.1.0. For inquiries about a particular bug or to report a bug, visit the Fortinet Support website.

Bug ID

Description

539482

In the FortiIsolator CLI, the "invalid value of internal gateway ip" error message that appears when you do not use the set mgmt-gw command correctly, needs to be updated.

539091

When you click the Online Help option in the FortiIsolator GUI, a Not Found error message is displayed.

537736

When you try to access the FortiIsolator GUI in Internet Explorer, a JavaScript error message may appear and the page will not open.

536768

When you install FortiIsolator VM for KVM, and select VirtIO disk as the second hard disk, the VirtIO disk may not mount and the installation fails.

536685

When high availability is enabled on FortiIsolator, in IP forwarding or proxy modes, when you browse to a webpage, a Webpage Load Error message may appear and the webpage will not open.

535590

When you enable high availability for the first time, after the FortiIsolator restarts and you browse to a webpage in IP forwarding mode, a Service Unavailable error message may appear and the webpage will not load.

Workaround: Restart the FortiIsolator a second time.

533640

When FortiIsolator is in a high availability cluster where there is one master host and one slave host, when you change the priority number of the slave host to make it the master host, the HA Cluster Information for the new master host in the FortiIsolator GUI may not display that there is a slave host in the Number of Slave field (the value is 0 instead of 1).

530412

After the license for FortiIsolator VM for KVM expires, you may still be able to access sites, up to the maximum number of supported sessions.

529790

After you have updated and saved the gateway settings a few times in the FortiIsolator GUI (Network > System Routing), you may not be able to update and save the gateway settings again.

529718

The system monitor script only checks if the server is running, and does not check the httpd or fis_daemon processes.

Workaround: Use the ps command to check for the processes. If the processes do not exist, restart FortiIsolator.

528463

If your browser does not have the FortiIsolator certificate installed, when you browse to a webpage in IP forwarding mode, you are prompted to install the certificate. If the certificate is installed in the Server tab in the Certificate Manager, when you try to browse to a webpage, a blank page may be displayed instead.

526060

When you browse to secure websites (HTTPS), an icon indicating that the connection or website is not secure may be displayed.

525329

In the System Routing page (Network > System Routing) in the FortiIsolator GUI, when you edit and save the gateway settings, the gateway settings may be deleted.

524787

When you set the date and time settings for FortiIsolator to a value that is earlier than the FortiIsolator installation date and time, it causes the certificate to be invalid and when you try to browse to a webpage, a Webpage Load Error message appears and the webpage will not open.

Workaround: Your administrator can manually update or restore the certificate files (for example, through the web portal) instead of allowing FortiIsolator to automatically update the certificate files.

522086

Sometimes when you try to log in to the FortiIsolator GUI, especially following a FortiIsolator restart, your browser may remain on the login page, instead of displaying the FortiIsolator Dashboard.

521408

For upstream proxy traffic from a FortiGate to FortiIsolator, when you browse to a webpage, the FortiIsolator certificate may not work properly and an error message appears stating that parts of the page, such as images, are not secure.

518319

When a FortiGate is in transparent proxy mode, it sends connection requests with the IP address of the destination website. FortiIsolator is using this IP address to sign the HTTPS interception certificate, which is not recognized by web browsers. FortiIsolator should extract the domain name from the SSL server name indication extension instead.

518192

When you scroll quickly up and down webpages, high quality images may not display correctly (partial images or rendering delays).

518188

In IP forwarding mode, when you browse to some webpages, a Webpage Load Error message may appear and the webpage will not open.

516860

FortiIsolator may not work correctly on iOS devices.

516731

FortiIsolator traffic should be forced to go to the Internet through the external interface, but it may use the internal interface instead.

516694

When you try to change the IP addresses of interfaces in the FortiIsolator GUI, an "Error happened. Please check your interface settings" error message may appear.

Workaround: Use the FortiIsolator CLI to change the IP addresses of interfaces.

515558

In the FortiIsolator GUI, after you upload a license using the Upload License option in the System Information widget on the Dashboard, information about the license, such as the VM serial number, may not be displayed.

Workaround: View the license information in the FortiIsolator CLI.

515546

In the FortiIsolator GUI, after you back up the system configuration, the System Configuration field in the System Information widget on the Dashboard may show N/A instead of the date and time of the last backup.

515535

When you upload a license, the FortiIsolator GUI may continue to display the "Uploading VM license file, please do not interrupt" message even after the upload is done.

515516

FortiIsolator does not support hard disk file types for Oracle VM VirtualBox OVF (VDI, VHD, VMDK, HDD, QCOW, and QED). When you try to configure these virtual hard disk types, the hard disk will not mount and the new configuration is lost after FortiIsolator restarts.

510103

When you try to sign in to Skype in a browser, authentication may not work and you cannot log in.

508924

When the browser redirects to a FortiGate login page that is using the default built-in certificate, FortiIsolator cannot verify the server domain name, and a blank screen is displayed instead of the login page.

508672

When you browse to webpages that contain JPEG files, the images may appear broken as you scroll up and down the webpage.

506858

In some browsers, when you browse to webpages that contain JPEG files, the images may not display and white space is displayed instead.

505602

When you browse to some webpages, the browser scrollbar may not work.

504781

If the date and time of the FortiIsolator certificate generation is later than the current date and time, it may cause certificate errors and you will not be able to browse to webpages.

Workaround: Set the FortiIsolator certificate date and time to a value that is earlier than the system time.

504515

In the FortiIsolator CLI, after you configure some TFTP parameters, such as local IP address, subnet mask, and gateway, the parameters may still display as not configured (N/A).

498958

When a webpage requires LDAP authentication (single sign-on) that involves multiple browser windows, authentication may not work and the browser freezes.

497139

When you try to use the scroll wheel on a mouse to zoom in and out on webpages (for example, on a map), the zooming may not work.

490166

After you set up a proxy server and import the FortiIsolator certificate into a browser, a "SECURITY_ERR, Cross zone connection not allowed" error may display.

486407

When FortiIsolator is installed, video chat websites may not work properly.

486373

FortiIsolator may not work correctly in the Safari web browser on iOS devices.

486371

FortiIsolator may not work on Android devices.

486130

When FortiIsolator is installed, you cannot access an FTP server from the browser.

485782

You may not be able to download the Skype application in some browsers.

485574

On macOS, you may not be able to type inside the Google search bar in the Safari web browser.

484804

When you browse to a webpage, there may be a slight delay before the webpage loads in some browsers.

472800

FortiIsolator may not work correctly on iOS devices.

452340

On iOS devices, when you touch the input areas on webpages, the keyboard may not appear.