Known Issues
The following issues have been identified in 7.2.0. To inquire about a particular bug or to report a bug, please contact Customer Service & Support.
AP Manager
Bug ID |
Description |
---|---|
697444 |
SSID with MPSK may not pass verification during an install. |
708100 |
AP Manager cannot show Channels when 160 MHz channel width is set. |
Device Manager
Bug ID |
Description |
---|---|
587404 |
FortiManager sets incorrect captive-portal-port value when installing v6.0 PolicyPackage to v6.2 devices. |
660491 |
Device Manager system interface should not allow duplicated secondary IP address. |
704106 |
Certificate Enrollment fails using SCEP on Microsoft server with sub-ca certificate chains. |
743112 |
Interface Bandwidth widget on FortiManager under device manager does not display any data for FortiGates. |
748578 |
Retrieve FortiGate configuration may fail due to FSSO connector. |
756650 |
Router > OSPF > Interface is missing configuration window for md5 keys. |
764369 |
FortiManager tries to install Security Fabric trusted list to all downstream FortiGates when a new one is added. |
767185 |
Unable to create route map rule using 'match-interface' when using the BGP templates under the provisioning templates. |
770600 |
Comma between IP address and subnet causes saving problem on Prefix List Rule under BGP Templates. |
773147 |
Installation fails due to the unexpected system interface config changes for "pvc" related settings. |
791117 |
Unable to create simultaneous static routes with named address objects. |
793941 |
Unable to install VPN psk with special characters through CLI template. |
795913 |
Error Probe Failure has been observed when adding FortiAnalyzer to FortiManager. |
799259 |
Duplicate CSF groups for 7.0 FGTs (7.0.2+) due to syntax returning upstream-ip instead of upstream. |
Others
Bug ID |
Description |
---|---|
729175 |
FortiManager should highlight device consisting of specific IP address under Fabric View. |
781831 |
FortiManager should be able to retrieve EMS tags using hostname of FortiClient EMS Server if its able to resolve the hostname. |
783226 |
Fabric View may keep loading. |
Policy & Objects
Bug ID |
Description |
---|---|
523350 |
FortiManager does not show the default certificate under SSL/SSH Inspection within policy. |
652753 |
When an obsolete internet service is selected, FortiManager may show entries IDs instead of names. |
656991 |
FortiManager should not allow VIP to be created with same IP for External IP and Mapped IP Address. |
688586 |
Exporting Policy Package to "CSV" shows "certificate-inspection" in the "ssl-ssh-profile" column even when the profile is not in use. |
698448 |
'Block Malicious URLs Discovered by FortiSandbox' in Web Filter Profile cannot be saved. |
705302 |
Remote VPN certificate installation failed and cert disappeared from FortiManager however on the FortiGate the certificate installed successfully. |
713692 |
Web Filter Profile install may fail when using pre-defined URL filter. |
719774 |
IP reputation for the policies are not working without source or destination. |
721253 |
FortiManager may not import all the roles and address groups from ClearPass. |
724011 |
FortiManager needs to support multiple server certificate list in ssl/ssh profile. |
725024 |
"Proxy Policy" page shows empty when the "View Mode" is selected as "Interface Pair View". |
725132 |
When modifying IP address of Default VPN Interface of spoke in Device Manager, hub remote gateway should be modified to reflect that change. |
725427 |
Policy package install skips the policy where destination interface is set as SD-WAN zone and policy is IPSEC policy. |
731037 |
There may be File Filter file type mismatch between FortiGate and FortiManager. |
751767 |
Export to excel when filters are applied for a policy package does not work. |
758494 |
Searching members inside an address group does not work. |
758680 |
Unable to complete the Cisco pxGrid fabric connector's configuration on FortiManager. |
767255 |
FortiManager fails to install the custom signature because it is too long. |
773249 |
FortiManager may not display the correct number of firewall address objects while adding the objects to DoS policy. |
774058 |
Rule list order may not be saved under File Filter Profile. |
774111 |
FortiManager does not support Dynamic firewall address with sub-type Switch Controller NAC Policy TAG. |
775128 |
Unable to create more than 20 SAML users in policy package object. |
777017 |
FortiManager purges the "arrp-profile" when installing the v6.2 policy packages to v6.4 FGTs. |
779965 |
Users may not be able to export firewall Header and Footer policies to Excel. |
792980 |
Installation fails when trying to install SAML user configuration. |
801876 |
Installation failed due to "Copy global shared objects" failure. |
841187 |
FOS 7.0.7 syntax support. See FortiManager 7.2.0 and FortiOS 7.0.8 compatibility issues. |
Revision History
Bug ID | Description |
---|---|
496870 |
Fabric SDN Connector is installed on FortiGate even if it is not in used. |
691240 |
FortiManager should not unset the value forward-error-correction with certain FortiGate platforms. |
779864 |
FortiManager cannot install ISDB object 'Microsoft-Intune'. |
Script
Bug ID |
Description |
---|---|
793407 |
Installation fails if one of the BGP network prefix entry is a supernet. |
Services
Bug ID | Description |
---|---|
704584 |
FAP firmware may not be listed and cannot be imported. |
798979 |
FortiManager cannot download the latest IPS DB. |
System Settings
Bug ID | Description |
---|---|
752916 |
FortiManager should be able to set desired permissions for Extender Manager in administrator profile settings. |
753690 |
SNMPv3 security option configuration has discrepancy between GUI and CLI. |
799504 |
Local restricted administrator users are able to view the task monitor. |
799519 |
If Management Extension Applications (MEA) are enabled, all system settings may be lost after upgrading the FortiManager. |
VPN Manager
Bug ID | Description |
---|---|
615890 |
IPSec VPN Authusergrp option "Inherit from Policy" is missing when setting xauthtype as auto server. |
699759 |
When install a policy package, per device mapped object used in SSL VPN cannot be installed. |