FortiOS 7.6.6 to 7.6.7

I updated the FortiGate from FortiOS 7.6.6 to 7.6.7 and am experiencing issues with SSL inspection certificates.

After the update, the firewall started dropping all traffic. Even traffic matching firewall policies without SSL inspection enabled is being dropped.

As a temporary workaround, you can disable SSL inspection globally to restore connectivity.

Has anyone else encountered this issue after upgrading to version 7.6.7? Is there a known bug or a recommended fix?

Update:

Not logging dropped packets

Firewall memory usage reaching 90%

Thousands of active sessions (compared to normal levels)

Staff

Hi delatorre,
Could you share me the config file over my official email (thiep@fortinet.com); I will try it on my lab?
Thanks,

Harry

Staff

Hi @delatorre

What error are you seeing under forward traffic logs and ssl event logs

Can you share what cmd you run for the workaround to disable ssl inspection

Further what kind of traffic were imapcted?

Only https traffic or even ping towards internet does not work?

Thanks, Salon

New Member

I have something similar in version 7.6.6 with HW who running NP7 processor

We were advised to set the following command in the relevant FW rules

#NP-ACCELERATION DISABLE (via CLI)

Sign up