Fortinet jako producent oprogramowania FortiManager opublikował aktualizację w wersji 7.2.4, która rozwiązuje problemy z przeszukiwaniem tras statycznych poprzez nazwę interfejsu, naprawia działanie dzienników zdarzeń i wiele więcej. Wszystkie zmiany zostały opisane w artykule poniżej.
Aktualnie wspierane modele:
FortiManager | FMG-200F, FMG-200G, FMG-300F, FMG-400E, FMG-400G, FMG-1000F, FMG-2000E
FMG-3000F, FMG-3000G, FMG-3700F, and FMG-3700G. |
FortiManager VM | FMG_DOCKER, FMG_VM64, FMG_VM64_ALI, FMG_VM64_AWS, FMG_VM64_AWSOnDemand, FMG_VM64_Azure, FMG_VM64_GCP, FMG_VM64_IBM, FMG_VM64_HV (including Hyper-V 2016, 2019), FMG_VM64_KVM, FMG_VM64_OPC, FMG_VM64_XEN (for both Citrix and Open Source Xen). |
Rozwiązane problemy:
AP Manager
Bug ID | Description |
---|---|
865486 | The FortiManager’s AP Manager permits the use of invalid channels with a 40MHz channel width. |
892773 | Assigning AP Profile returns invalid value. |
Device Manager
Bug ID | Description |
---|---|
768289 | There is a discrepancy in the usage of quotation marks („”) when configuring DHCP relay from FortiManager or retrieving it from FortiGate. |
831624 | SD-WAN Monitor under the Monitors displays time frame as „invalid date - invalid date „. |
895001 | The „gui-ztna ” configuration is displayed as enabled on the FortiManager even though this setting is disabled on the FortiGate. |
896127 | When attempting to create a VLAN type with a name longer than 15 characters, FortiManager displays an error message. |
896367 | The geographic coordination config of FortiGates on Device Manager is being reset to 0,0 after a certain period of time. |
899350 | Promote button is missing for FortiGate 80F Clusters. |
899541 | An error message, „upgrade image failed”, is shown, even though the upgrade has been completed successfully. |
902908 | Managed FortiAnalyzer is not listed under System Template. |
905869 | Invalid default value for VRF ID is observed when creating static route. |
910391 | When FortiManager operates in a non-default workspace mode, it may attempt to purge the configuration of the FortiGate devices due to database corruption. |
911535 | Adding a Model device with MetaVariables changes the status of other devices which using the MetaVariables to Modified/unknown. |
915361 | FortiWifi devices are displayed in FortiManager under the Vulnerable devices as FortiAP. |
917810 | FortiManager displays an event log with the „update temp cachedb failed” error message when changing the FortiGate management VDOM to mgmt-vdom. |
917969 | FortiManager is unable to search static routes via its interface name. |
919613 | When using a space character in „psksecret „, the FortiManager is unable to install the „psksecret ” and displays an error message. |
921094 | In 6.2 or 6.4 ADOMs, problems might occur when attempting to add or modify static routes. |
925546 | Assigned Devices on Provisioning Template\CLI Temp shows incorrect VDOM. |
925684 | Only a maximum of 10 devices can be previewed before installation using 'install preview’. |
925854 | FortiManager fails to load the security fabric data for FortiGates (Versions 7.0.5+ & 7.2.5). |
931736 | Adding a new cli template script into existing cli template group changes the order of cli templates to alphabetical order. |
936544 | When importing CLI Templates, GUI displays a blank page. |
FortiSwitch Manager
Bug ID | Description |
---|---|
881766 | Event logs or task manager do not show which user authorized a Fortiswitch. |
947651 | Per Device under the FortiSwitch Manager cannot edit FortiSwitch name and GUI returns error „invalid value”. |
Global ADOM
Bug ID | Description |
---|---|
894714 | FortiManager does not allow creating/modifying or removing the per-device mapping in global objects in assigned ADOM. |
925188 | The per-device mapping for any assigned global objects cannot be modified. |
Others
Bug ID | Description |
---|---|
880465 | TCP ports 8902 & 8903 are opened and in listening mode after the upgrade. |
885665 | Unable to specify type of objects in FortiProxy ADOM. |
894947 | FortiManager fails to trigger the event handler for its local events after enabling the FortiAnalyzer feature. |
895982 | Admin with a super user profile is not able to create the Firmware Template when FortiManager is working in the Workflow mode. |
900512 | FortiManager ADOM Upgrade fails with the error message, „Peer type cannot be peer when authentication method is pre-share key”. |
910175 | When provisioning the FortiExtender via CLI template, FortiManager displays the „mismatch interface” error message. |
914027 | FortiManager does not display/use the latest ISDB version for all of its ADOMs. |
916463 | The approval emails are not being sent to the „Email Notification” admins when a new session is created and submitted for approval. |
918129 | FortiManager does not support the AWS Security Token Service in AWS SDN connector. |
919981 | Installation fails to Azure FortiGate standalone as FortiManager attempts to set the peervd to „root”. |
921273 | Unable to upgrade ADOMs due to the XSS vulnerability characters check on wireless-controller. |
925778 | FortiGates are displayed offline and Inactive on FortiWLM MEA. |
930425 | When downloading the install preview, the file name doesn’t include the timestamp. |
Policy and Objects
Bug ID | Description |
---|---|
696367 | Hit count, first used, and last used may not get updated on FortiManager. |
780058 | FortiManager’s GUI does not support the „src-vendor-mac ” objects in Firewall policy. |
830640 | „Send files to FortiSandbox for inspection” option is being enabled when creating an antivirus profile. |
863819 | Unable to delete unused objects. |
869863 | NSX connector; unable to deselect the group with no users. |
873358 | Installation fails as FortiManager tries to set „cgn-client-startip ” and „cgn-client-endip ” settings when ippool object has been modified. |
880418 | The default values of the Application Control Profile entries cannot be changed. |
883064 | Any admin make changes to „Object Selection Pane”, either set it to Dock to Right, Dock to Bottom, or Classic Dual Pane, it will affect all other admin’s GUI preferences. |
889586 | Azure Service Tags not displayed correctly in FortiManager. |
894597 | Default value for „unsupported-ssl-version ” in ssl-ssh-profile gets modified during the installation. |
896461 | FortiManager disables ip6-send-adv after opening and closing interface configuration. |
898883 | Exported firewall policies do not contain firewall address values IP, netmask and other details. |
899135 | Installation fails as FortiManager tries to unset the „arrp-profile ” during the installation. |
902298 | FortiManager does not generate error messages when invalid or obsolete application IDs are used in the policy. Instead, it allows installation and sets the category to „pass” or „monitor”. |
912114 | FortiManager is unable to import OpenStack SDN connector and the following error message is displayed: „send_sdn_connector_openstack_cmd: Failed to get openstack token”. |
914945 | Unable to modify or clone the „SSL/SSH inspection profile” in the Policy & Object on the ADOM 7.0 version. |
914981 | In Policy & Object, local policy is not displayed if view mode „Interface pair view” is selected. |
916459 | The option „Allow Websites When a Rating Error Occurs” is not being saved correctly in the default web filter. |
919415 | Unable to „Edit” and „Delete” Installation Target after enabling classic dual pane mode. |
919681 | The incoming and outgoing interfaces are not loading after creating a custom policy package in a 7.2 FortiGate ADOM. |
920740 | Unable to create a per device mapping for a virtual server |
922648 | FortiManager unable to push WiFi SSID to FortiGates. |
924680 | Policy packages containing geo-based ISDB objects may not be successfully installed to the FortiGates. |
925058 | „Web URL Filter”entries are not visible in the Web Filter Profile. |
925076 | FortiManager tries to install different preconnection-id under VPN SSL WEB Portal > Profile > Bookmark-Group > GUI-Bookmark > Book. |
939979 | After editing authentication-rule/portal mapping, FortiManager installs unexpected changes to these rules. |
Revision History
Bug ID | Description |
---|---|
513317 | FortiManager may fail to install policy after FortiGate failover on Azure. |
904710 | Restoring a revision of a policy removes the information of all the SD-WAN rules. |
Script
Bug ID | Description |
---|---|
913360 | Device script is trying to add additional configuration; therefore, installation gets failed. |
923966 | When FortiManager is operating in Workspace mode, there are no options to save changes after executing a CLI script. |
931196 | Scheduled Scripts created by the LDAP users cannot be run and FortiManager displays „Data is not ready” error message. |
System Settings
Bug ID | Description |
---|---|
842732 | FortiManager does not display the Secondary HA member’s status correctly. |
861997 | Unable to delete a particular non-default empty ADOM. |
890956 | SAML SSO Authentication only works with the default local certs. |
VPN Manager
Bug ID | Description |
---|---|
847479 | Despite being configured for 'SHA-256,’ FortiManager is installing 'SHA-1′ certificates on FortiGates. |
863424 | The „Latest Patch Level” should be available with action „Check-up-to-date” under the SSL VPN Portal. |
923221 | Provision Template – IPsec Tunnel: cannot Activate IPsec_Fortinet_Recommended; GUI returns error. |
931564 | In VPN Manager, ipsec vpn map, topology view, and traffic view do not display map normally. |
Notatki producenta: FortiManager 7.2.4
Pozdrawiamy,
Zespół B&B
Bezpieczeństwo w biznesie
Post Views: 1 134