FSSO version 4.3.0117 - Whats new?

[square20]

Between FortiOS MR3Patch6 and patch7, the FSSO software changed from version 4.3.0108 to version 4.3.0117. Does anybody know where to find the changelog so we are aware of what might change moving to 4.3.0117 might introduce? Thanks

[rwpatterson]

" If it ain' t broke, don' t fix it!" = If you have no problems with what you' re using, why upgrade? Just my two cents.

[jmac]

The FortiOS firmware release notes usually specify the minimum version of FSSO supported for that firmware, which is usually the most current at the time. I have never seen release notes for FSSO to know what has changed, but I usually work it in to the maintenance update cycle on the servers running it. I have had sync issues with FSAE/FSSO in the past but have not had any problems in the past couple years. That said, all the systems I currently support are running 4.3.0117. I have never encountered a problem which required me to downgrade the FSSO version.

[rwpatterson]

In the same grain, tech support usually tells you to upgrade to the latest version... I' m quite a few versions behind with great results. I' m not going to toss a wrench into the works... I enjoy my free time.

[fropert_FTNT]

Hello There are some bug fix between b108 and b117 but also: * reduce network bandwidth between CA and Domain Controllers in polling mode * adding more statistics for NTLM requests handling * performance improvement of single sign on collector agent

[izatt82]

Do you guys know how the client talks to the firewall? Is it encrypted? Tech support could not answer this question for me. I have had a lot of trouble configuring LDAPS because fortinet in all their wisdom only lets you import a CA cert for LDAPS instead of using whatever cert you want on the firewall.