Unable to create MAC address-based policies in NGFW mode.

In NGFW policy mode, sessions are not re-validated when security policies are changed. A workaround is to clear sessions after a policy change.

One-arm sniffer logging shows inaccurate SNMP application sent bytes.

Web filter warning message does not contain certification chain.

Custom IEC-104 application control signatures skipped after signature database update.

HTTP traffic is dropped when custom proxy options are applied to a policy.

IPS engine crashes (5.218 ips_dlp_alert).

Firewall schedule settings are not following daylight saving time.

BZIP2 file including EICAR is detected in the original direction of the flow mode firewall policy even though scan-bzip2 is disabled.

One-arm IPS URL filter unable to block HTTPS websites.

Not getting past block/override page or warning page when doing a web filter override in flow mode.

Remote category flow and proxy mode wildcard matching difference

FGSP synchronized UDP sessions may be blocked in NGFW policy mode when asymmetric routing is used due to a policy matching failure. Other types of traffic may also be affected (such as TCP) in the case of failover of the reply direction traffic to a different FortiGate in the FGSP cluster.

Chassis has multiple IPS crashes and UTM web filter is impacted after enabling web filter content header.

IPSA self test failed, disable IPSA! IPSA disabled: self test failed message appears in system event logs.

IPS archive timestamp is dated from 1970.

File filter monitor blocks files in flow AV if there is a scan error.

IPS engine (flow mode deep inspection) does not decrypt some TLS 1.3 sessions, which causes problems with application control detection.

FGSP support in NGFW policy mode.

High memory usage for some slab objects.

set https-replacemsg disable causing connection RST on URLs in URL filter list (flow-based inspection).

URL filtering followed by /* causes rating error.

IPS engine crash.

Unable to open fb.watch website in flow mode using SSL deep inspection with application control.

Memory usage increases up to conserve mode after upgrading IPS engine to 5.00239.

Facebook.com website gives error in Firefox version 89 with flow mode and deep inspection.