Skip to main content
pacionet
New Member
June 25, 2025
Question

Fortigate 7.4.8 - ADVPN Hub and Spoke firmware versions problems

  • June 25, 2025
  • 2 replies
  • 1394 views

Hi,

we are trying to set up an Hub and Spoke VPN where Spoke have firmware 7.4.8 while Hub has firmware 7.2.11

 

We found some problems with these versions, while seems to work with spoke with firmware 7.4.7

 

We got troubles when we set up these flags:

 

auto discovery receiver -> ENABLED

device creation  -> ENABLED

 

on the spokes

 

Are there any bugs with latest firmware 7.4.8 ?

Are there minimum requirements with Hub firmware versions to support Spoke with 7.4.8 firmware?

 

Thanks

2 replies

RJ1
Explorer II
June 25, 2025

There is known bug in 7.4.8 as below:

BUG ID: 140823 : IPsec tunnels stuck on spoke np6xlite drops the ESP packet.

BillH_FTNT
Staff
Staff
June 25, 2025

Hi pacionet,

Could you please let me know the device version (hardware) used in the Hub and Spoke setup?
Have you collected any debug logs or packet sniffers? If so, could you kindly share them with me?
Also,if can, please send your configuration to me via email at bhoang@fortinet.com.
I’d like to review your debug logs and configuration to try reproducing the issue in my lab. Thank you

Regards

Bill

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT