Skip to main content
k_theos
New Member
November 16, 2020
Question

FortiOS 6.4.3 problems!

  • November 16, 2020
  • 5 replies
  • 6285 views

Hello everyone, I am managing a Fortigate 60E, which up until yesterday, was running  FortiOS 6.2.1 build 0932(GA) for many months without any issue. I backed up the configuration and upgraded the system with the latest firmware and patches, following the proper upgrade path up to FortiOS v6.4.3 build1778 (GA) so the system is up to date. Ever since the upgrade, users complain about websites being blocked, general internet browsing delay and out of nowhere, "encrypted network traffic, untrusted certificate" prompt messages from their ESET antivirus, which i am not sure how relevant to our Fortigate device is but users claim that they started having these problems today which is after the FortiOS upgrade. Most of the websites being blocked have already been set up in the Policy & Objects ----> Addresses in the FQDN section to have access before the upgrade

 

I am running out of ideas atm and i am not sure if there is a way to properly downgrade the system back to 6.2.2 without creating bigger problems

 

Currently i am forced to turn Web filter off so everyone can work but this is not a solution of course.

 

Any ideas or anyone with similar problem ? Regards

    5 replies

    ede_pfau
    SuperUser
    SuperUser
    November 16, 2020

    I guess you are using the built-in Factory certificate for SSL inspection. This is different in each firmware version. Either import it onto your users' PCs, or use a commercial cert which your users trust.

    The complaint of ESET is correct...

    vbhoj74
    New Member
    November 17, 2020

    Just a thought, Will restoring the old backup not restore the old Fortinet CA SSL certificate ?

    k_theos
    k_theosAuthor
    New Member
    November 17, 2020

    I spend a good few hours last night trying to experiment and see if i can find a solution. In the end i downgraded back to the old firmware waiting for customer's feedback. The problem with the new firmware was that, not all users had connection issues after the upgrade but only a few

     

    In my case i wasn't able to replicate the problem either. No ESET warnings no nothing.

     

    Thank you all for your feedback

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.