Question
Firmeware update v7.6.5 build3651 changed Fortigate configuration IPSec
Had Fortigate set to automatic firmware updates. On Dec 11th, last update did three things that no update should do:
- Changed password settings. Automatically turned on 12 character complex password with no authorization.
- Disabled AP's from connecting to Fortigate. Manually had to authorized.
- And the most damaging was to change the IPSec parameters. Could not remotely connect to even diagnose what was going on. Change the DH Group setting for both Phase 1 and Phase 2 to 14, 20 and 21.
The default DH Group when creating a IPSec connection in Forticlient is 5 which is what we were using.
Why are you changing my routers settings without my consent? And changing integral settings so as to render VPN connections useless. It took four days to figure out what was going on.
Unacceptable in my opinion. It is my hardware. It is my configuration. At least ask me to make those changes for security reasons.
