Nowa wersja FortiAuthenticator 6.4.9 to łatka przynosząca rozwiązanie problemów z funkcjonowaniem rozwiązania. Rozwiązano problemy dotyczące między innymi filtrowania grup LDAP, z konfiguracją realm, oraz z regułą synchronizacji generującą duże wolumeny zbędnych logów. Naprawiono również problem z dystrybucją FortiToken Mobile za pomocą FortiAuthenticator.
Rozwiązane problemy:
| Bug ID | Description |
|---|---|
| 950260 | Change in FortiToken Cloud 'balance’ API breaks the inventory widget. |
| 950252 | CSV Mac device import fails due to MAC address wildcard formatting.
Previously resolved in 665381. |
| 981456 | 500 internal server error when attempting password reset using security question while the user is temporarily locked. |
| 903747 | Instruction link for installing FortiToken Mobile application is blocked on the self-service portal. |
| 842886 | Upgrading FortiAuthenticator in HA-LB removed the MAC address records form the LB node. |
| 980017 | Script for performing AWS image import does not work. |
| 937201 | Sync rule with no OTP method generates excessive logs. |
| 978303 | Disable ssh-rsa from the SSH server host-key algorithm. |
| 953106 | Unable to change Fortinet logo on one of the replacement message. |
| 853068 | For the session expired token page entering wrong token does not redirect to the Login page. |
| 941594 | Remote user sync rule Test Filter feature adds a slash at the end of the filter. |
| 973754 | Incorrect password with PCI mode enabled results in 500 error. |
| 868810 | Heavy FSSO-linked DNS traffic could result in the loss of HA heartbeats. |
| 948606 | LDAP group filter query fails when 3 CN is chosen. |
| 939073 | Subject NameID under Assertion Attribute not defaulting to username. |
| 936220 | Registering an already existing username triggers 500 error. |
| 964676 | It takes around 10 seconds to create or migrate IAM user on any account. |
| 968656 | Unable to configure the fourth and the last realm in Authentication > SAML IdP > General. |
| 951623 | Custom dictionary attributes are not reliably added to the database, preventing use in device configuration. |
Znane problemy:
| Bug ID | Description |
|---|---|
| 971708 | AWS FortiAuthenticator 6.4.7 (XEN) restored from a converted configuration backup cannot log in to the web GUI or change the password from FortiAuthenticator SSH. |
| 919941 | VPN tunnel cannot be up after failover to a secondary FortiAuthenticator. |
| 970306 | Device with radacctd process crashes. |
| 981538 | SQL error messages after a CLI administrator login with an incorrect password on HA passive. |
Notatki producenta: FortiAuthenticator 6.4.9
Pozdrawiamy,
Zespół B&B
Bezpieczeństwo w biznesie