Troubleshooting Tip: Unable to add Service Groups in captive portal exempt list after upgrading to FortiGate v7.4.9

[lkumar]

Description	This article describes the issue of being unable to add service groups to the captive portal exempt list after upgrading the FortiGate to version 7.4.9. It provides a step-by-step solution to resolve the problem.
Scope	FortiGate v7.4.9
Solution	When attempting to add the service group to the captive portal exemption list, the service group option does not appear or is not available in the GUI. Upon verifying the service groups, they are visible under the Policy & Objects section. To resolve this issue, configure the service group for the captive portal exemption list through the CLI using the following commands. config user security-exempt-list     edit <profile_name>         config rule             edit 1                 set service "Email Access" "Exchange Server" "Web Access" "Windows AD" "test"             next         end     next end After adding the service group through the CLI, it will appear in the GUI as an Internet Service Group.