FortiManager 7.4.8 tries to push unsupported "config vpn ssl settings" to FortiWiFi-30G
We have a FortiWiFi-30G running FortiOS 7.4.8 managed by FortiManager 7.4.8.
During configuration installation, FortiManager tries to push the following commands:
config vpn ssl settings set banned-cipher SHA1 SHA256 SHA384 set servercert '' endAs a result, the installation fails with:
install and save finished status=FAILED
The command config vpn ssl settings does not exist on this model (only config vpn ssl client is available).
FortiWiFi # config vpn ssl client Client. FortiWiFi # config vpn ssl setting command parse error before 'setting' Command fail. Return code 1Although the error doesn’t affect the running configuration, the device always stays in Conflict state, and automatic updates do not work.
How can we remove or exclude this part (config vpn ssl settings) from the configuration template so that FortiManager stops trying to apply it?
Verification report excerpt:
---> generating verification report (vdom root: vpn ssl settings:banned-cipher) remote original: to be installed: SHA1 SHA256 SHA384 (vdom root: vpn ssl settings:servercert) remote original: to be installed: '' (vdom root: vpn ssl settings:status) remote original: to be installed: disable <--- done generating verification report
Thank you in advance for your assistance on this issue.