Skip to main content
Hubert_cheng
New Member
March 25, 2024
Question

81F updated the version (7.2.4 ->7.2.8) the host could not connect to the interface.

  • March 25, 2024
  • 2 replies
  • 1288 views

Fortigate 81F:
When I updated the version (7.2.4 ->7.2.8), the host could not connect to the interface.
As a result, the host cannot connect to the external network through the interface.

The original policy settings have not changed.

context:
1. There are 4 hosts in the same domain connected to different ports of fortigate, but they can all ping each other, but they cannot ping to the interface of fortigate.

Please tell me how can I solve it?
At present, there is no way to restart the fortigate or restart the host.

2 replies

johnathan
Staff
Staff
March 25, 2024

There was a change in 7.2.6 that affects IP Pools and VIPs. Please ensure that the External Address of these objects do not overlap with that host. See: https://docs.fortinet.com/document/fortigate/7.2.8/fortios-release-notes/283455/ip-pools-and-vips-are-now-considered-local-addresses

It may be helpful to do a debug flow as per: https://docs.fortinet.com/document/fortigate/7.4.3/administration-guide/38044/using-the-debug-flow-tool

Never trust a computer you can't throw out a window.
Hubert_cheng
New Member
March 26, 2024

Thank you, johnathan,

I solved the problem,
Because:
1. The original IP is also set in the virtual IP
2. and used in policy

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!