Technical Tip: Duplicate sequence groups after upgrading to v7.6.7

Description

This article describes a behaviour seen in the FortiGate's GUI under Policy & Objects -> Firewall Policy after an upgrade to v7.6.7, where the Sequence Groups appear duplicated.

Scope

FortiOs v7.6.7.

Solution

Before the upgrade:

After upgrading to v7.6.7:

The issue is cosmetic, and the Fix is included in the upcoming versions 7.6.8 and 8.0.1.

Workaround:

Delete the 'global-label' from all Firewall rules except the first one in the group. In this example, the label can be removed from Firewall Policies 27, 28, and 3. Only Rule 40 should have the global-label command set.

config firewall policy
edit 27
unset global-label
next
edit 28
unset global-label
next
edit 3
unset global-label
next
end

After deleting the global label, the rules will be grouped correctly.