FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
subramanis
Staff
Staff
Article Id 408417
Description This article provides the solution for the error encountered when adding the ssl.root interface to a route map.
Scope FortiGate.
Solution

If there is a requirement to match the ssl.root interface in the route map, the configuration can be performed through the CLI. However, an error is encountered when attempting the same action through the GUI.


This GUI error, where the interface is not displayed as expected, is only a cosmetic issue and does not impact functionality:

 

config router route-map
    edit "test"
        config rule
            edit 1
                set match-interface "ssl.vdom1"
                unset set-ip-prefsrc
            next
        end
    next
end

 

Screenshot 2025-08-27 104315.jpg

 

This is identified as a known issue: 1142290 and is observed in versions 7.0.14, 7.2.11, 7.4.7, and earlier. It has been resolved in versions 7.4.9, 7.6.4, 8.0.0, and later.