Version 9.4.0
|
Ticket # |
Description |
|---|---|
| 643817 | Added L2 Polling to Palo Alto |
| 692446 | Added Preserve Port Names option to update port names when changed at the switch. Option can be modified at the switch and global level. See Device properties and Network device in the administration Guide for more information. |
| 699487 | Kerberos support |
| 699857 | User Organizational Unit OU LDAP mapping to use it in User/Host Profile |
| 709286 | New UI menu to download log files for troubleshooting. See Download logs in the 9.4 Administration Guide. |
| 726333 | Entitlements (such as concurrent licenses) for Subscription Licenses are not accurately reflected in the Administration UI License Management view and only show Base licenses. |
| 733943 | Changing password in bulk using Set Model Configuration sets the same username for all selected devices. |
| 747921 | Portal renaming does not rename the associated CSS files. |
| 750248 | Unable to access the secondary server's Configuration Wizard in a High Availability configuration. |
| 752941 | GUI option to select the RADIUS MAC delimiter for Juniper Switches |
| 755328 | Embed Tomcat into yams |
| 756167 | RADIUS view sort by Winbind column fails, shows empty table. |
| 756499 | MicroSoft InTune MDM integration does not support latest API. |
| 759018 | Admin user with admin user profile permissions to Access, Add/Modify and delete "Users" is unable to create a new regular user. |
| 762071 | Radius Auth/EAP Type columns empty in Network > Device > Ports > Adapters table. |
| 762081 | bsc-rename-ethers service fails on virtual machines. |
| 770208 | Juniper switches fail to change VLAN on ports that are RADIUS enabled. |
| 770930 | High L3 Polling frequency in environments with no SSO management configured. |
| 770974 | Event Lifetime alarm trigger rule is not being honored when configured. |
| 773426 | Continued work on wired generic RADIUS integration |
| 773828 | Not polling L2 information from PNetworks switches with latest firmware. |
| 774724 | Unable to filter Hosts and Adapters by status through API. |
| 776171 | Rewrite Host/User/Adapter dialogs |
| 777400 | Syncing "Role Based Access" may delete sub-groups |
| 778157 | L2 Polling issues with Cisco 9800 WLC firmware 17.3. |
| 778520 | Added SQL query for GroupManager.getGroupsMembershipIDs() when determining group membership in order to improve performance. |
| 778940 | AV Product to detect Windows Security Center-detected products |
| 779414 | Client filter for User Accounts, Hosts, and Adapters not functioning properly rewrite of OmniSources. |
| 779873 | FortiNAC processes taking unusually long to startup due to delays resuming FirewallSessionMgr. |
| 779901 | Vulnerabilties in mysql versions less than 5.6.42. |
| 780282 | FortiNAC Events using old vendor name "Bradford Networks". |
| 780626 | Huawei Wireless controller imports nameless APs. |
| 780755 | Alarms view used the legacy Dashboard actions. |
| 780790 | CLI Failing to Alcatel Omni 6860-P48. |
| 781520 | RADIUS COA failing for FortiAP when hosts are deleted. |
| 782374 | L2 polling not parsing correctly for Motorola 7.X devices. |
| 782418 | Hide Accepted Requests Enabled and click on Expand Widget - Widget shows Accept Requests |
| 782433 | Fix Integration for D-Link DGS-3130-30TS. |
| 782438 | InvalidYamsUserException seen during UI logout. |
| 782740 | Unable to read default and current vlans for Ruijie switches. |
| 782744 | Script install-winbind-virtual contains spaces around = assignments - invalid. |
| 782760 | Huawei S7706 switch is not reflecting the interface port number correctly in the Label column. |
| 782884 | Green theme has similar colors for charts. |
| 783227 | Check that freeradius gpg key is imported. |
| 783536 | Portal Auth - FAC VSA Fortinet-Group-Name is not created in FNAC. |
| 783544 | Fortigate FG-200F improperly labeled as FG-201E. |
| 783552 | NAC service not running at startup when no IP address is configured for eth0. This causes "Processes Down" to display in UI. |
| 783587 | AirWatch MDM roles are overwritten by user roles. |
| 783621 | Host import related Memory issues. |
| 783944 | Exception reading VLANs on Meru 4100 with firmware 5.1-93. |
| 784045 | Memory leak in stacked-area-chart.Symptom includes Dashboard becoming unresponsive if left open for long periods of time. |
| 784346 | RADIUS Reject doughnut is not centered if filter does not include any reject counts. |
| 784517 | Location filtering not working on Connections view. |
| 784601 | Group membership lookup causing high CPU utilization. |
| 784618 | RADIUS Failures after upgrading from 8.5 to 8.8 due to bad secret. |
| 784957 | Not polling L2 information from Cisco ME-3400E-24TS-M router. |
| 785367 | RADIUS GroupName - Group Members list does not show all members. |
| 785403 | Unable to add user to user group containing * in name. |
| 785438 | A None/Use Default option has been added to Users Dialog > Mobile Providers. |
| 786277 | RADIUS Group - Exception when user group already exists with Type non-User. |
| 786401 | Remote Scan -> Linux x86_64 -> 500 Error |
| 786434 | Allow changing CLI Passwords from Secondary and FNAC-A systems. |
| 786670 | Exception thrown when loading Logical Network Host Access tile. |
| 786744 | User Accounts view > create user is not passing password as encoded, and will not match auth requests. |
| 786751 | Distinguished Name (DN) can now be used in User view filters. |
| 786785 | Not able to add ciphers under RADIUS > TLS config page. |
| 787271 | Certificate Management View - Server Certs & Trusted Certs views both showing results from both views. |
| 787562 | MDM sources can't override the host icon. |
| 787563 | Fix null pointer exception during SNMP read of Meraki L2. |
| 787584 | Logical Network Host Access host info slider not displaying info. |
| 787585 | DHCP fingerprints are not matching DHCP message type. |
| 787909 | Portal configuration changes don't take effect without restart. |
| 787957 | Self-Registered Guest Login,: Failed to retrieve SMS Providers - null |
| 788066 | Server startup delayed by incorrect thread start logic on Network Session Event updater. |
| 788089 | RADIUS service will not start after upgrade to 9.2 if winbind is not fully configured. |
| 788119 | Network Events table does not show totals for Event Type column. |
| 788138 | Network Events has no option to filter child records. |
| 788729 | Randomly RADIUS 802.1x proxy stops working. |
| 788825 |
DHCP fingerprint additions, changes or improvements to the following: "Camera","D-Link" "Camera","TRENDnet" "HVAC","Honeywell" "Mobile","Samsung SmartWatch" "Gaming","Nintendo" "Network","Router/Netgear" "Network","Router/D-Link" "Network","Router/Trendnet" "Network","Apple TV" -> "internet_tv","Apple TV" "Network","Amazon Fire TV" -> "internet_tv","Amazon Fire TV" "Network","Chromecast" -> "internet_tv","Chromecast" "Network","DIRECTV" -> "internet_tv","DIRECTV" "Network","DVR/TiVo" -> "internet_tv","DVR/TiVo" "Network","Roku Media Player" -> "internet_tv","Roku Media Player" |
| 788849 | New dashboard tiles relating to Connections were incorrectly not masking the background. |
| 789018 | Service Connectors > REST SMS Gateway > The required fields should be the same in create and edit page |
| 789061 | Service Connectors > REST SMS Gateway > HTTPs Toggle is not working expectedly when API URL is specified with https. |
| 789228 | Modifying adapter allows Physical Address to be left blank. |
| 789309 | Filtering on the column Type does not work on Network Events. |
| 789316 | Deleting multiple User Accounts in a row does not delete all user in table. |
| 789396 | Service Connectors > REST SMS Gateway > Overview: Cant tell which REST SMS Gateway is set as default. |
| 789440 | SMS sending would stop after the first user. |
| 789763 | When changing the date via the Settings tile, Recent Hosts tile date range not updating properly. |
| 789785 | Not able to add groups to the Roles. |
| 789865 | Network > Service Connectors > REST SMS Gateway: The default gateway is not working when the mobile provider is None. |
| 790010 | Two tiles without settings still show Settings. |
| 790403 | Fix ClassCastException in AirespaceSwitch during WAP read. |
| 790580 | Network > Service Connectors > REST SMS Gateway: Security Incidents of a host doesn't trigger the corresponding SMS. |
| 790747 | FGT interface with VLANs does not show device connections to VLAN sub interfaces for traps. |
| 790854 | Failure to properly read Cisco trunk ports results in undesired VLAN switching. |
| 790904 | Creating new user as non-admin hangs retrieving Role dropdown values. |
| 791273 | Non Admin User Can Edit Admin User. |
| 791276 | Clicking EULA Link When Logging In As New User Goes To Broken Link. |
| 791304 | Admin Profile > Uncheck All removes General permissions. |
| 791327 | FortiNAC is changing WAP Uplink ports Current VLAN to match the Default VLAN. |
| 791342 | Manually Registered IP Phones get incorrect device type assigned. |
| 791401 | Dashboard > Scans > By Day grouping is incorrect. |
| 791841 | Edit Host Dialog > Device Type is not reading/writing the correct value. |
| 792452 | NetworkSessionEventUpdater is throwing an exception on startup. |
| 792514 | A remote unauthorized user can gain the version of the Tomcat used by FortiNAC by sending an HTTP GET request. |
| 792516 | Vulnerable scripts |
| 792522 | Fix Database auth changes for initial install. |
| 792986 | Device Types, Role, User ID drop down is not ordered. |
| 793169 | Messaging Gateways > Change how passwords are transmitted. |
| 793920 | Default Admin Profiles Have No Permissions. |
| 794036 | User Record values must be populated automatically if the user exists in an Active Directory or an NCM. |
| 794067 | Not pulling L2 information from Aruba 8.X firmware. |
| 794362 | System Update not reliably trusting fnac-updates.fortinet.net. |
| 794381 | Fortigate forwarding class does not work with tlsv1.3. |
| 794774 | Landing Page does not work for all choices. |
| 794783 | Typo in a CLI Password error message. |
| 794791 | Admin user is brought to the last-viewed page when logging in to UI instead of designated Landing page. |
| 794937 | The Recent Hosts widget is not displaying addtional host info when clicking counts. |
| 795243 | Portal - Request Processing Rules: Text at edge of window for Auto Configure and Publish. |
| 795260 | Local RADIUS Server not returning proxy-state attribute in Access Accept for Motorola/Extreme Networks WiNG VX 9000. |
| 795260 | Motorola controllers proxying AP auth requests send Proxy-State attr and expect it unchanged in response. RADIUS (local) does not send it back. |
| 795623 | Log output from Windows Profile method when parsing fails. |
| 796048 | An error is getting thrown during NetworkSessionEvent archive & purge. |
| 796065 | Unable to set device profiling to Host to Logged in User (if Present) on NCM. |
| 796105 | Device Type incorrectly changing for registered devices. |
| 796145 | Guest and Contractors > Select one and View > send SMS throws a null pointer exception. |
| 796259 | In Pending Tasks page, tasks are allowed to be completed, even if their parent task is incomplete. |
| 796515 | UnsupportedOperationException trying to autoclose FileSystem in process manager. |
| 796522 | TelnetServer not handling SocketTimeoutException. |
| 796533 | Support for Physical Ethernet MAC for Apple TV in Jamf. |
| 796623 | MicroSoft Intune API only returns ethernetMacAddress per device. |
| 796659 | Host information does not display when clicking "Total Count" on Persistent Agent Summary widget. |
| 796663 | Setting option for Persistent Agent System Page is not allowing to toggle between visualizations. |
| 796908 | Clicking the number in the Logical Network Host Access tile does not open the hosts slide. |
| 796965 | Network Device Summary widget not showing complete switches and Wireless AP counts. |
| 797369 | Added Minutes/Hours/Days control to Logical Network Host Access tile. |
| 797439 | Host > Edit Host > Cannot change the Role or manually Register as Device. |
| 797465 | Nested group memberships not detected. |
| 797542 | Dashboard > Scan > Group by Hour adjusts timezone. |
| 797708 | Force 10 switches sometimes modeled incorrectly. |
| 797723 | Local RADIUS mode:RADIUS fails for endpoints connecting to a FortiSwitch that has been renamed. |
| 797778 | AdminProfileManager has a null reference on Startup. |
| 797834 | Unable to properly expand details of "Network Events". |
| 797919 | Network > Service Connector > REST SMS: All of the SMS sent out using the default SMS Gateway even when the mobile provider is set. |
| 798181 | RADIUS Service Host MAC filter does not print debug if supplicant does not use colon mac delimiter. |
| 798234 | Rejected Hosts view in RADIUS Activity tab doesn't properly filter table results to exclude a specific reject cause. |
| 798234 | RADIUS dashboard tile - rejected hosts slide opens empty. |
| 798511 | Upgrading from 0159 to 0160 results in error: Access denied for user nac@localhost (using password: NO). |
| 798651 | Can not access RADIUS Activity view if user has "Activity" but not "Local Service" RADIUS view permissions. |
| 798665 | REST SMS Gateway: In Captive network > Guest Self Registratiion page, when Mobile Provider=None, the SMS is not sent. |
| 799804 | TLSv1 and TLSv1.1 is now disabled in portal by default. |
| 800323 | Policy name in Admin Profile > Permissions are not consistent with policy name in Policy & Object. |
| 800408 | API query for FLink FSW data deprecated in FOS 7.2+.Prevents FortiSwitches in Link mode from being added to Inventory when the managing FortiGate is discovered. |
| 800811 | User with permission for access users is also able to delete user. |
| 801221 | SQL Exception thrown in NetworkSessionEventUpdater if DYNAMICLOG table is missing from database. |
| 801252 | RADIUS not mapping to correct AD server when kerberos and netbios names differ for a single winbind instance. |
| 801623 | Phone numbers formatted to E.164 before sending to gateway. |
| 801661 | GUI - URI navigation drops query params, losing tab indicator, prevents direct links to secondary views. |
| 801666 | Host summary tile total values don't apply filter. |
| 801971 | Groups view doesn't automatically reload. |
| 802343 | The message template under Notify User Via Email is not editable in Self Registration Login Portal Configuration. |
| 802372 | Vulnerability Scan Status on Host view page displays as "-1" instead of passed, failed or not scanned. |
| 802913 | Clicking Cancel in Create User view results in browser console errors. |
| 802923 | ClassCastException when creating/deleting trigger. |
| 802942 | Parsing issue with Mobile Iron Cloud integration. |
| 803033 | FortiNAC Agent version 9.4.0.93 is included with this release. |
| 803061 | Multicast IPv6 addresses can now be excluded using the MAC address Exclusion view. See MAC address exclusion in the 9.4 Administration Guide for details. Note: After upgrade, toggle the option off and on in order for the function to take effect. |
| 803645 | output.nessus - several java.io.FileNotFoundException errors |
| 803651 | Model Config of VDOM reports 404 error and exception in output.master. |
| 803745 | Top Host Activity Widget - maps Device Type to User&Hosts > Hosts > Operating Systems Column instead of Device Type. |
| 803745 | The Top Host Activity tile was using getTypeLabel instead of getIconType to populate the Device Type column |
| 804512 | A null reference exception is thrown sometimes when expanding/scrolling the Network Events datatable. |
| 804518 | Local Radius leaves out Tunnel-Private-Group-ID and Filter-ID when Quarantine enforcement is set to "bypass". |
| 804913 | Logical Network Host Access total count slide out shows all hosts for the Logical Network instead of only hosts for the specificed time sample. |
| 805725 | Historic Network Event data is incorrectly setting Disconnect time. |
| 805866 | Scheduled Shared Filter Reports result in error event. |
| 806122 | Roles not being assigned properly to Registered Hosts. |
| 806141 | Network > NetworkEvents - upgrade from 9.x to 9.4Type, LogicalNetwork and NetID is not showing expected data. |
| 806141 | Network > NetworkEvents Type, LogicalNetwork and NetID is not showing expected data. |
| 806282 | When a user attempts to complete a task via the notification bell, and it has a parent task that is still open, it incorrectly displays a "Changes Saved" message. |
| 806567 | known_hosts file has duplicate host entries. |
| 807062 | On upgrade, FortiNAC loses it eth0 IP Address. |
| 807383 | The POST method to add a new HostRecord has changed in this version.POST attempts using the old API call fails. |
|
586499 765212 |
SMS Gateway Support |
|
725235 756818 |
Debug logging enhancements |
|
751403 782386 |
RADIUS Activity Monitoring - Additional Misc Fixes. |
| 782391
782386 |
RADIUS health activity- Current last 90 min does not match Timeline Chart Time Span for 90 min |
| 784737
785526 |
Location and IPRange method match failure prevent matching lower rank rules. |
|
801948 803681 |
Fresh Deployed server will not start: java.sql.SQLException: Connections could not be acquired from the underlying database. |
|
750209 |
Enhancement made to detect unrecognized devices that support standard based RADIUS management via CoA/Disconnect. |
|
759481 |
FortiNAC detects AV engine status on windows |