FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
J_Xia
Staff
Staff
Article Id 261947
Description This article describes an issue during the upgrade of FortiGate to versions 7.2.5 or 7.4.0, if a HA management interface is configured, the GUI may not display the last interface entry in 'config system interface' on various pages such as interface list, policy list, address list, and DNS server.
Scope FortiGate 7.2.5 and 7.4.0, HA Cluster with HA Management Interface configure.
Solution

In the picture below, FGVM was upgraded from 7.2.4 to 7.4.0:

 

J_Xia_0-1687898286913.png

 

The HA management interface is configured before the upgrade.

 

J_Xia_1-1687898286929.png

 

For instance, if an IPsec interface named 'test' was created,

 

J_Xia_2-1687898286936.png

 

after going back to the Network -> Interface section, the 'test' tunnel interface will not be visible under port1.

 

J_Xia_3-1687898286949.png

 

Similarly, the 'test' tunnel interface cannot be found when configuring firewall policies.

 

J_Xia_4-1687898286958.png

 

Note that this is a GUI-only display issue and does not affect the actual functionality of the impacted interface. It is still possible to use the CLI to create firewall policies for the missing interface, even though it may not be visible in the GUI.

 

J_Xia_5-1687898286964.png

 

Workaround:

Users can create a dummy interface to be the last entry in the 'config system interface' table.

config system interface
    edit "dummy_loopback"
        set vdom "root"
        set status down
        set type loopback
    next
end

 

J_Xia_6-1687898286978.png

Contributors