Fortinet black logo

Version 9.1.6

Version 9.1.6

Ticket #

Description (9.1.6.0162)

640841 SSH connection to some AlaxalA switches fail.
741373 Support for Mobile Iron V2 API
743180 Issue with parsing saved filters that are blank in SharedClient Filters.
746585 Cisco Mac Move Notification Trap support.
752792 Device Profiling Rule registration not setting user/group membership.
754605 Added Tripp Lite DHCP fingerprints
756499 Support for "ethernetMacAddress" for MicroSoft InTune MDM integration for the latest API.
757705 Legacy SSO requires tags to be configured even though they are not used.Applies to FortiGate integrations.
758009 Added support to change VLANs via CLI on Allied Telesyn 8000S.
759018 Admin user with admin user profile permissions to Access, Add/Modify and delete "Users" is unable to create a new regular user.
761276 User/Host Profile with Location does not use Portal defined in Portal Configuration.
762081 bsc-rename-ethers service fails on virtual machines.
762702 Improved FortiClient EMS polling.Previously, not all hosts were retrieved upon a poll, causing some hosts not to register.
765477 FortiClient EMS test connect still fails after correcting a credential mistake.
765483 Fortinet EMS Version parsing is broken for EMS 7.0.
766600 L3 polling support for Inhand IR915L Router
767209 Aerohive VLAN interfaces do not update on resynchronization after VLAN ID or Profile ID change.
768329 Fail to determine port type for Cisco SG Switches with latest Cisco firmware.
768785 The GUI value "Registered Host" now displays as "Registered Host With Owner".
768822 FortiSwitch does not respond to Change of Auth (COA) packet due to FortiNAC not sending the correct secret.
769558 NullPointerException registering a rogue host from the Hosts View.
769851 Accounting Stop Message is discarded from Link Mode FortiSwitches when using Local Radius.
770034 FGT 1800F labeled as 1500D
770208 Juniper switches fail to change VLAN on ports that are RADIUS enabled.
770695 Local RADIUS fails to find correct port on Extreme Summit X, preventing proper VLAN assignment.
770738 Ruckus API version detection not working for login API
770930 High L3 Polling frequency in environments with no SSO management configured.
771038 Port State Actions without clear actions cannot be saved in Event to Alarm mapping.
771149 "Confirm Device Rule on Connect" does not work properly when "Confirm Device Rule on Interval" is also enabled within the same Device Profiling rule.
771157 MobileIron Cloud application poll can fail if licenseID is too long.
771506 Erroneous creation of redundant unique keys could overfill Group table key limits.
771685 Apresia integration RADIUS 802.1x support incomplete.
771705 Change Inhand mib file to not use WRITE_HIDDEN in 9.1. and 9.2.
773828 Not polling L2 information from PNetworks switches with latest firmware.
773841 Meraki Switch VLAN read/set fails when the ifIndex does not match the dot1d index.
774202 Adjusted timestamp in syslog CEF message format.Previous formatting prevented some systems from properly processing syslog from FortiNAC.
774724 Unable to filter Hosts and Adapters by status through API.
776123 Unable to add/modify groups starting with "!" (bang).
777124 A higher ranked policy more general than a lower ranked policy is still honored if disabled.Lower ranked policy displays with a strike-through and is ignored.
777511 RADIUS support for HP 2910 and 2920 switches.
777778 Juniper switch VLAN change fails using 802.1x authentication and Proxy RADIUS.
778108 Windows domain check Device Profiling method fails if there is no domain user logged on.
778112 Performance issue when performing group membership lookups.Symptoms include usually high CPU utilization.
778157 L2 Polling issues with Cisco 9800 WLC firmware 17.3.
778520 Added SQL query for GroupManager.getGroupsMembershipIDs() when determining group membership in order to improve performance.
779901 Vulnerabilties in mysql versions less than 5.6.42.
780626 Huawei Wireless controller imports nameless APs.
780790 CLI Failing to Alcatel Omni 6860-P48.
782374 L2 polling not parsing correctly for Motorola 7.X devices.
782740 Unable to read default and current vlans for Ruijie switches.
783227 Operating System updates from the UI fail when freeradius gpg key is not present.
783544 Fortigate FG-200F improperly labeled as FG-201E.
783621 Host import related Memory issues.
783944 Exception reading VLANs or SSIDs on Meru 4100 with firmware 5.1-93.
784601 Group membership lookup causing high CPU utilization.
784957 Not polling L2 information from Cisco ME-3400E-24TS-M router.
786401 Remote Scan -> Linux x86_64 -> 500 Error
787563 NullPointerException (NPE) during L2 poll of Meraki.
787585 DHCP fingerprints are not matching DHCP message type.
788825

DHCP fingerprint additions, changes or improvements.

Added: "Camera","D-Link"; "Camera","TRENDnet"; "HVAC","Honeywell"

Updated: "Mobile","Samsung SmartWatch"; "Gaming","Nintendo"; "Network","Router/Netgear"; "Network","Router/D-Link"; "Network","Router/Trendnet"

Changed Device Type: "Network","Apple TV" -> "internet_tv","Apple TV"; "Network","Amazon Fire TV" -> "internet_tv","Amazon Fire TV"; "Network","Chromecast" -> "internet_tv","Chromecast"; "Network","DIRECTV" -> "internet_tv","DIRECTV"; "Network","DVR/TiVo" -> "internet_tv","DVR/TiVo";

"Network","Roku Media Player" -> "internet_tv","Roku Media Player"

790403 ClassCastException in AirespaceSwitch during WAP read.
790747 FortiGate interface with VLANs does not show device connections to VLAN sub interfaces for device detection traps.
794362 System Update not reliably trusting fnac-updates.fortinet.net.
793920 Default Admin Profiles Have No Permissions
782760 Huawei S7706 switch does not correctly reflect the interface port number in Label column.

792522

Fix Database auth changes for initial install

797465

Nested group memberships not detected.

794362

System Update not reliably trusting fnac-updates.fortinet.net.

799842

Endpoint Compliance - Policies: Takes 30 seconds to create policy, exception occurs due to user clicking OK more than once.

756499

MS InTune MDM integration does not support latest API.

782433

Fix Integration for D-Link DGS-3130-30TS.

784618

RADIUS Failures after upgrading from 8.5 to 8.8 due to bad secret.

788729

Randomly RADIUS 802.1x proxy stops working.

790854

Failure to properly read Cisco trunk ports results in undesired VLAN switching.

791304

Admin Profile > Uncheck All removes General permissions.

791327

FortiNAC is changing WAP Uplink ports Current VLAN to match the Default VLAN.

791342

Manually Registered IP Phones get incorrect device type assigned.

798511

Upgrading from 0159 to 0160 results in error: Access denied for user nac@localhost (using password: NO).

Version 9.1.6

Ticket #

Description (9.1.6.0162)

640841 SSH connection to some AlaxalA switches fail.
741373 Support for Mobile Iron V2 API
743180 Issue with parsing saved filters that are blank in SharedClient Filters.
746585 Cisco Mac Move Notification Trap support.
752792 Device Profiling Rule registration not setting user/group membership.
754605 Added Tripp Lite DHCP fingerprints
756499 Support for "ethernetMacAddress" for MicroSoft InTune MDM integration for the latest API.
757705 Legacy SSO requires tags to be configured even though they are not used.Applies to FortiGate integrations.
758009 Added support to change VLANs via CLI on Allied Telesyn 8000S.
759018 Admin user with admin user profile permissions to Access, Add/Modify and delete "Users" is unable to create a new regular user.
761276 User/Host Profile with Location does not use Portal defined in Portal Configuration.
762081 bsc-rename-ethers service fails on virtual machines.
762702 Improved FortiClient EMS polling.Previously, not all hosts were retrieved upon a poll, causing some hosts not to register.
765477 FortiClient EMS test connect still fails after correcting a credential mistake.
765483 Fortinet EMS Version parsing is broken for EMS 7.0.
766600 L3 polling support for Inhand IR915L Router
767209 Aerohive VLAN interfaces do not update on resynchronization after VLAN ID or Profile ID change.
768329 Fail to determine port type for Cisco SG Switches with latest Cisco firmware.
768785 The GUI value "Registered Host" now displays as "Registered Host With Owner".
768822 FortiSwitch does not respond to Change of Auth (COA) packet due to FortiNAC not sending the correct secret.
769558 NullPointerException registering a rogue host from the Hosts View.
769851 Accounting Stop Message is discarded from Link Mode FortiSwitches when using Local Radius.
770034 FGT 1800F labeled as 1500D
770208 Juniper switches fail to change VLAN on ports that are RADIUS enabled.
770695 Local RADIUS fails to find correct port on Extreme Summit X, preventing proper VLAN assignment.
770738 Ruckus API version detection not working for login API
770930 High L3 Polling frequency in environments with no SSO management configured.
771038 Port State Actions without clear actions cannot be saved in Event to Alarm mapping.
771149 "Confirm Device Rule on Connect" does not work properly when "Confirm Device Rule on Interval" is also enabled within the same Device Profiling rule.
771157 MobileIron Cloud application poll can fail if licenseID is too long.
771506 Erroneous creation of redundant unique keys could overfill Group table key limits.
771685 Apresia integration RADIUS 802.1x support incomplete.
771705 Change Inhand mib file to not use WRITE_HIDDEN in 9.1. and 9.2.
773828 Not polling L2 information from PNetworks switches with latest firmware.
773841 Meraki Switch VLAN read/set fails when the ifIndex does not match the dot1d index.
774202 Adjusted timestamp in syslog CEF message format.Previous formatting prevented some systems from properly processing syslog from FortiNAC.
774724 Unable to filter Hosts and Adapters by status through API.
776123 Unable to add/modify groups starting with "!" (bang).
777124 A higher ranked policy more general than a lower ranked policy is still honored if disabled.Lower ranked policy displays with a strike-through and is ignored.
777511 RADIUS support for HP 2910 and 2920 switches.
777778 Juniper switch VLAN change fails using 802.1x authentication and Proxy RADIUS.
778108 Windows domain check Device Profiling method fails if there is no domain user logged on.
778112 Performance issue when performing group membership lookups.Symptoms include usually high CPU utilization.
778157 L2 Polling issues with Cisco 9800 WLC firmware 17.3.
778520 Added SQL query for GroupManager.getGroupsMembershipIDs() when determining group membership in order to improve performance.
779901 Vulnerabilties in mysql versions less than 5.6.42.
780626 Huawei Wireless controller imports nameless APs.
780790 CLI Failing to Alcatel Omni 6860-P48.
782374 L2 polling not parsing correctly for Motorola 7.X devices.
782740 Unable to read default and current vlans for Ruijie switches.
783227 Operating System updates from the UI fail when freeradius gpg key is not present.
783544 Fortigate FG-200F improperly labeled as FG-201E.
783621 Host import related Memory issues.
783944 Exception reading VLANs or SSIDs on Meru 4100 with firmware 5.1-93.
784601 Group membership lookup causing high CPU utilization.
784957 Not polling L2 information from Cisco ME-3400E-24TS-M router.
786401 Remote Scan -> Linux x86_64 -> 500 Error
787563 NullPointerException (NPE) during L2 poll of Meraki.
787585 DHCP fingerprints are not matching DHCP message type.
788825

DHCP fingerprint additions, changes or improvements.

Added: "Camera","D-Link"; "Camera","TRENDnet"; "HVAC","Honeywell"

Updated: "Mobile","Samsung SmartWatch"; "Gaming","Nintendo"; "Network","Router/Netgear"; "Network","Router/D-Link"; "Network","Router/Trendnet"

Changed Device Type: "Network","Apple TV" -> "internet_tv","Apple TV"; "Network","Amazon Fire TV" -> "internet_tv","Amazon Fire TV"; "Network","Chromecast" -> "internet_tv","Chromecast"; "Network","DIRECTV" -> "internet_tv","DIRECTV"; "Network","DVR/TiVo" -> "internet_tv","DVR/TiVo";

"Network","Roku Media Player" -> "internet_tv","Roku Media Player"

790403 ClassCastException in AirespaceSwitch during WAP read.
790747 FortiGate interface with VLANs does not show device connections to VLAN sub interfaces for device detection traps.
794362 System Update not reliably trusting fnac-updates.fortinet.net.
793920 Default Admin Profiles Have No Permissions
782760 Huawei S7706 switch does not correctly reflect the interface port number in Label column.

792522

Fix Database auth changes for initial install

797465

Nested group memberships not detected.

794362

System Update not reliably trusting fnac-updates.fortinet.net.

799842

Endpoint Compliance - Policies: Takes 30 seconds to create policy, exception occurs due to user clicking OK more than once.

756499

MS InTune MDM integration does not support latest API.

782433

Fix Integration for D-Link DGS-3130-30TS.

784618

RADIUS Failures after upgrading from 8.5 to 8.8 due to bad secret.

788729

Randomly RADIUS 802.1x proxy stops working.

790854

Failure to properly read Cisco trunk ports results in undesired VLAN switching.

791304

Admin Profile > Uncheck All removes General permissions.

791327

FortiNAC is changing WAP Uplink ports Current VLAN to match the Default VLAN.

791342

Manually Registered IP Phones get incorrect device type assigned.

798511

Upgrading from 0159 to 0160 results in error: Access denied for user nac@localhost (using password: NO).