New features or enhancements

More detailed information is available in the New Features Guide.

Bug ID	Description
836613	Add CLI option for each FortiClient EMS connector (`trust-ca-cn`). This option is enabled by default. When enabled, the CA and CN information is stored with the connector, which allows the FortiGate to automatically approve an updated certificate as long as it has the same CA and CN. config endpoint-control fctems edit <ems-id> set trust-ca-cn {enable \| disable} next end
841928	In some scenarios where it is necessary to simulate a system crash, the following commands allow a super_admin administrator to safely trigger a kernel crash using a SysRq key. # diagnose debug kernel sysrq status # diagnose debug kernel sysrq {enable \| disable} # diagnose debug kernel sysrq command crash A kernel crash dump is outputted to the console. The FortiGate reboots and recovers without losing any functionality. This is only supported on FortiGate VMs.
854704	FortiGate VMs with eight or more vCPUs can be configured to have a minimum of eight cores to be eligible to run the full extended database (DB). Any FortiGate VM with less than eight cores will receive a slim version of the extended DB. This slim-extended DB is a smaller version of the full extended DB, and it is designed for customers who prefer performance.
855561	Use API endpoint domain name from instance metadata to support FortiOS VM OCI DRCC region.
868592	Support Saudi Cloud Computing Company (SCCC) and alibabacloud.sa domain (a standalone cloud backed by AliCloud).
869198	Make the health check sensitive enough to detect small amounts of packet loss by decreasing the link monitor check interval and probe timeout minimum limit down to 20 ms, which will significantly impact VOD/voice.

More detailed information is available in the New Features Guide.

Bug ID

Description

836613

Add CLI option for each FortiClient EMS connector (trust-ca-cn). This option is enabled by default. When enabled, the CA and CN information is stored with the connector, which allows the FortiGate to automatically approve an updated certificate as long as it has the same CA and CN.

config endpoint-control fctems
    edit <ems-id>
        set trust-ca-cn {enable | disable}
    next
end

841928

In some scenarios where it is necessary to simulate a system crash, the following commands allow a super_admin administrator to safely trigger a kernel crash using a SysRq key.

# diagnose debug kernel sysrq status

# diagnose debug kernel sysrq {enable | disable}

# diagnose debug kernel sysrq command crash

A kernel crash dump is outputted to the console. The FortiGate reboots and recovers without losing any functionality. This is only supported on FortiGate VMs.

854704

FortiGate VMs with eight or more vCPUs can be configured to have a minimum of eight cores to be eligible to run the full extended database (DB). Any FortiGate VM with less than eight cores will receive a slim version of the extended DB. This slim-extended DB is a smaller version of the full extended DB, and it is designed for customers who prefer performance.

855561

Use API endpoint domain name from instance metadata to support FortiOS VM OCI DRCC region.

868592

Support Saudi Cloud Computing Company (SCCC) and alibabacloud.sa domain (a standalone cloud backed by AliCloud).

869198

Make the health check sensitive enough to detect small amounts of packet loss by decreasing the link monitor check interval and probe timeout minimum limit down to 20 ms, which will significantly impact VOD/voice.

FortiOS Release Notes

New features or enhancements

New features or enhancements

New features or enhancements