DNS UTM log still presents unknown FortiGuard category even when the DNS proxy received a rating value.

Applying a negate for the Application Name column in the log viewer is not working as expected.

Security rating test for FortiCare Support fails when connected to FortiManager Cloud or FortiAnalyzer Cloud.

IPsec tunnel interface Bandwidth widget inbound is zero and outbound value is lower than the binding interface.

GUI being exposed to port 80 on the interfaces defined in the ACME settings, even if administrative access is disabled on the interface.

First ICMP redirected from FGSP secondary is dropped on FGSP primary when UTM is enabled.

The session is not synchronized after HA failover by detecting monitored interface as down.

Configuration backup on standby unit fails when using SFTP.

HA interfaces flapping on FG-3401E.

The number of IPS sessions is higher than kernel sessions, which causes the FortiGate to enter conserve mode.

IPsec VPN Interface shows incorrect TX/RX counter.

NAT detection in shortcut tunnel sometimes goes wrong.

When upgrading from 6.4.9 to 7.0.6 or 7.0.8, the traffic is not working between the spokes on the ADVPN environment.

Phase 2 not initiating the rekey at soft limit timeout on new kernel platforms.

If a tunnel in an IPsec aggregate is down but its DPD link is on, the IPsec aggregate interface may still forward traffic to a down tunnel causing traffic to drop.

The Peer ID field in the IPsec widget should not show a warning message that Two-factor authentication is not enabled.

In an HA cluster, static routes via the IPsec tunnel interface are not inactive in the routing table when the tunnel is down.

FortiGates are showing Logs Queued in the GUI after a FortiAnalyzer reboot, even tough the queued logs were actually all uploaded to FortiAnalyzer and cleared when the connection restores.

FortiCloud log statistics chart on the Log Settings page shows incorrect data.

FortiAnalyzer log statistics chart on the Log Settings page shows incorrect data.

Log filter with negation of destination IP display all logs.

Syslog did not update the time after daylight saving time (DST) adjustment.

A miglogd crash occurs when creating a dynamic interface cache on an ADVPN environment.

FG-40F/FWF-61F halts after upgrading.

An error case occurs in WAD while handling the HTTP requests for an explicit proxy policy.

When a server sends a connection close response too early, traffic from the client may be interrupted inadvertently before the request is completed.

User information attributes can cause disruption when they are not properly merged.

Early packet drop occurs when running UTM traffic on virtual switch interface.

Redistributed BGP routes to the OSPF change its forward address to the tunnel ID.

Application forticron signal 11 (Segmentation fault) occurs.

FortiGate local traffic does not follow SD-WAN rules.

Delay in joining (S,G) in PIM-SM.

All BGP routes in dual ADVPN redundant configuration are not getting updated to the correct WAN interface post-rollback to WAN failover.

After upgrading, SD-WAN is unable to fail over the traffic when one interface is down.

Security rating test for FortiAnalyzer fails when connected to FortiAnalyzer Cloud.

Customer internal website is not shown correctly in SSL VPN web mode.

SSL VPN web mode connection to VMware vCenter 7 is not working.

Internal website is not displaying user-uploaded PDF files when visited through SSL VPN web mode.

SSL VPN web mode to RDP broker leads to connection being closed.

SSL VPN policy is ignored if no user or user group is set and the FSSO group is set.

Problem with the internal website using SSL VPN web mode.

RDP freezes in web mode with high CPU usage of SSL VPN process.

SSL VPN tunnel mode gets disconnected when SSL VPN web mode is disconnected by limit-user-logins.

Interface belonging to other VDOMs should be removed from interface list when configuring a GENEVE interface.

High memory usage caused by downloading a large CRL list.

Egress traffic on EMAC VLAN is using base MAC address instead.

In FIPS-CC mode, if cfg-save is set to revert, the system will halt a configuration change or certificate purge.

When setting the speed of 1G SFP ports on FG-180xF platforms to 1000full, the interface does not come up after rebooting.

VIP traffic access to the EMAC VLAN interface uses incorrect MAC address on NP7 platform.

QSFP and QSFP+ Fortinet transceivers are not operational on FG-3401E.

High CPU utilization occurs when relay is enabled on VLAN, and this prevents users from getting an IP from DHCP.

The FEC configuration under the interface is not respected when port23 and port24 are members of an LACP and the connection is 100G. Affected platforms: FGT-340xE, FGT-360xE.

SNMP multicast counters are not increasing.

ACME auto-renewal is not performed after HA failover.

When traffic is offloaded to an NP7 source MAC, the packets sent from the EMAC VLAN interface are not correct.

FG-3501F NP7 is dropping all traffic after it is offloaded.

Kernel panic occurs due to null pointer dereference.

Unable to configure dscp-based-priority when traffic-priority dscp is configured under system global.

LAG interface has NOARP flag after interface settings change.

FG-3000F reboots unexpectedly with NULL pointer dereference.

QSFP/QSFP+ port23/port24 are down after upgrading to 7.0.11 on FG-3401E.

FG-601E crashes randomly after upgrading to 7.0.8 and 7.0.11.

FortiOS 7.0.12 is no longer vulnerable to the following CVE Reference:

• CVE-2023-29183

FortiOS 7.0.12 is no longer vulnerable to the following CVE Reference:

• CVE-2023-29178

IPS Engine 7.00167 is no longer vulnerable to the following CVE Reference:

• CVE-2023-40718

FortiOS 7.0.12 is no longer vulnerable to the following CVE Reference:

• CVE-2023-27997

FortiOS 7.0.12 is no longer vulnerable to the following CVE Reference:

• CVE-2023-41841