Added FortiGate VPN Support

Fixed issue where FortiNAC could not L3 poll Fortigate FortiGate-201E

Added client disconnect functionality support for WLC C9800

Changes to support Swagger document generation

Additional clean ups and expansions to the REST API

Fixed connection issue between Control Manager and managed FortiNAC servers. Previously, this condition could cause the following behavior:

• Management processes on the Control Manager to report down
• Managed FortiNAC servers to stop processing RADIUS authentication packets

Fixed issue where exports of Device Profiling Rules to an XML file did not work

Fixed issue where Admin Profile Manage Hosts and Ports setting were not saved

Fixed issue where the enter key did not create an entry in the Add Logical Network dialog.

Fixed issue where changing VLANs on newer Alcatel devices used the incorrect OID

Added new methods to retrieve a HostRecord from an IP or MAC Address.

Fixed issue where FortiNAC sent an incorrect serial number to FortiGate via CSF

Fixed FortiNAC recognition time of when FortiGate connection is closed.

Fixed issue with high cpu/load averages on control server

Added Rogue Evaluation Queue Size: NNN, Details button and Flush button to the Device Profiling Rules view to provide better visibility and control over the rogue evaluation queue.

Fixed Apply to Group drop down menu under SSO Agent options in the FortiGate model Elements tab. Previously, this menu was grayed out when the Apply to Group check box was selected.

Fixed issue with USB external adapter/dongle sharing between hosts. Agent technology can now be configured to remove adapters from the host record when the agent no longer detects the adapter connected.

Note: This function is disabled by default and cannot be enabled through the Administration UI. Contact Support for assistance and reference KB article FD47971.

Fixed FortiGate modeling error with eight linked FortiSwitches

Fixed an issue where Meraki SSID models are removed on a vlan poll when the SSIDs are disabled on the device

Fixed restarting DHCP fingerprinting on ETH1 interfaces in HA environments

Fixed issue where Host IP address was not registered when connecting to FortiGate

Fixed processing of add/move/delete FGT syslog messages for managed FSWs in Link Mode.

Fixed issue with attempting to access the REST API URL /api/server

Fixed Model Configuration not correctly mapping VLANs to individual switches

Fixed issue with reading VLANs on Cisco 9000 IOS-XE

Modified Arista.mib login sequence

Support for Arista "switchport access" and "switchport trunk" modes

Fixed Syslog parse error and null pointer exception with FGT Syslog connection updates

Fixed potential database corruption issue when using Device Profiling Rules with custom DHCP fingerprints.

Fixed issue where PODs were not synchronizing in NCM GUI

Fixed FortiSwitch ports disappearing after switch reboot

Fixed issue where attempting to disable a host by IP Address using the REST API fails if the host is offline.

Fixed issue where uncompressed database backup replicated to secondary, causing 100% Disk usage

Fixed issue where FortiNAC periodically did not gzip bakcup files on the Secondary HA Server.

Fixed issue where FortiNAC replied with the wrong path to FortiGate via CSF

Added RADIUS Authentication support for Aruba JL256A and HP J9727A

Fixed OutOfMemoryError when configuring Security Fabric settings

Added the ability for FortiNAC to be configured to respond to traffic using the same interface it was received (policy based routing). Required for VPN integrations and static IP environments. This function is disabled by default and requires configuration via CLI. Refer to the applicable VPN integration guide or contact Support for assistance.

DHCP Fingerprint additions and updates

Fixed issue where files in /var/named/chroot/etc are not replicated to the secondary

Under System Updates, if the SFTP protocol is selected, an error dialog will display when attempting to save or test with any names where SFTP access is no longer supported to download code. Other names or IP addresses can still be configured to use SFTP.

Fixed issue where FSSO Tag is added/removed constantly and toggles the applied firewall policy

For AWS, fixed ConfigWizard to display UUID and eth0 MAC address in license panel.

Fixed issue where the Login box of the Guest Self Registration page was greyed out, preventing registration after approval.

Fixed potential issue in Device Profiler for rules containing an Active (AKA nmap) method.

Fixed issue with Set Model Configuration View being non-functional.

Added support for new Checkpoints

Fixed issue with Device Profile rules for Fortigate false positives matches

Fixed potential NullPointerException error when "FortiGate" Method was used in Device Profiling Rule. This issue could cause the rule match to fail.

Updated FortiNAC to support changes to the FortiOS firewall session table. Previously, FortiGate Session details were not displayed for when the FortiGate was running version 6.2.2 or newer.

Fixed potential database corruption when using Device Profiling Rules after upgrade from 8.6 to 8.7

Fixed Adapter View not showing IP address of the host