Fortinet black logo

Known issues

Known issues

The following issues have been identified in Hyperscale firewall for FortiOS 6.4.10 Build 2000. For inquires about a particular bug, please contact Customer Service & Support. The Known issues described in the FortiOS 6.4.10 release notes also apply to Hyperscale firewall for FortiOS 6.4.10 Build 2000.

Bug ID

Description

724085 Traffic offloaded by NP7 processors is blocked by EMAC-VLAN interfaces when the parent interface is in another VDOM. If auto-asic-offload is disabled in the firewall policy, then the traffic flows as expected.
796368 Hyperscale firewall VDOMs do not support traffic shaping policies or profiles. Only outbandwidth traffic shaping is supported for hyperscale firewall VDOMs.

802369

Hyperscale firewall policies containing a fixed allocation IP pool and a large number of client IP addresses (for example, 65K addresses) can cause high CPU usage and can reduce overall system performance.

817091

NP7 processors drop ICMP and UDP sessions in an asymmetric FGSP cluster if the sessions are accepted by a firewall policy with UTM enabled.

Known issues

The following issues have been identified in Hyperscale firewall for FortiOS 6.4.10 Build 2000. For inquires about a particular bug, please contact Customer Service & Support. The Known issues described in the FortiOS 6.4.10 release notes also apply to Hyperscale firewall for FortiOS 6.4.10 Build 2000.

Bug ID

Description

724085 Traffic offloaded by NP7 processors is blocked by EMAC-VLAN interfaces when the parent interface is in another VDOM. If auto-asic-offload is disabled in the firewall policy, then the traffic flows as expected.
796368 Hyperscale firewall VDOMs do not support traffic shaping policies or profiles. Only outbandwidth traffic shaping is supported for hyperscale firewall VDOMs.

802369

Hyperscale firewall policies containing a fixed allocation IP pool and a large number of client IP addresses (for example, 65K addresses) can cause high CPU usage and can reduce overall system performance.

817091

NP7 processors drop ICMP and UDP sessions in an asymmetric FGSP cluster if the sessions are accepted by a firewall policy with UTM enabled.