Troubleshooting Tip: How to fix an issue with Virtual Servers after upgrading to v7.2.6 or v7.4.1

[Ylli_Seitaj]

Description	This article describes how to fix an issue related to Virtual Servers after upgrading to v7.2.6 or v7.4.1.
Scope	FortiOS v7.2.6, v7.4.1.
Solution	After upgrading to v7.2.6 or v7.4.1, if the 'ssl-mode' of the Virtual Servers configuration is set to 'full', the Virtual Servers may not work properly. Below is an example where Virtual Servers are configured with 'ssl-mode full': config firewall vip     edit <VIP_name>        set uuid <ID_of_UUID>        set type server-load-balance        set server-type https        set extip <IP_address>        set extintf "any"        set http-ip-header enable        set monitor <Name_of_the_health_check_monitor>        set color 9        set ldb-method least-session        set persistence http-cookie        set extport 443        config realservers            edit 1                set ip <IP_address>                set port 443            next            edit 2                set ip <IP_address>                set port 443            next            edit 3                set ip <IP_address>                set port 443            next        end        set http-multiplex enable        set ssl-mode full        set ssl-certificate <Certificate_name>     next end To fix the issue, execute the following commands on the Virtual Servers that are not working properly: config firewall vip     edit <VIP_name>        set server-type ssl     next end Note:  The 'Virtual Server' must be removed from the firewall policy to change the 'server-type'. Otherwise, the following error will appear.  After executing the above commands, the issue with Virtual Servers should not be present anymore. The 'server-type' defines the protocol to be load balanced by the virtual server. When 'server-type' is set as HTTPS, only the HTTPS sessions with the destination port number that matches the Virtual Server Port setting are load balanced. When 'server-type' is set as SSL, only SSL sessions with the destination port number that matches the Virtual Server Port setting are load balanced. Related documents: Config firewall VIP Virtual Server