FortiManager 7.4.8 tries to push unsupported "config vpn ssl settings" to FortiWiFi-30G

[DmytroKyiv]

We have a FortiWiFi-30G running FortiOS 7.4.8 managed by FortiManager 7.4.8.
During configuration installation, FortiManager tries to push the following commands:

config vpn ssl settings
  set banned-cipher SHA1 SHA256 SHA384
  set servercert ''
end

As a result, the installation fails with:
install and save finished status=FAILED

The command config vpn ssl settings does not exist on this model (only config vpn ssl client is available).

FortiWiFi # config vpn ssl
client    Client.

FortiWiFi # config vpn ssl setting
command parse error before 'setting'
Command fail. Return code 1

Although the error doesn’t affect the running configuration, the device always stays in Conflict state, and automatic updates do not work.

How can we remove or exclude this part (config vpn ssl settings) from the configuration template so that FortiManager stops trying to apply it?

Verification report excerpt:

---> generating verification report

(vdom root: vpn ssl settings:banned-cipher)
    remote original:
    to be installed: SHA1 SHA256 SHA384

(vdom root: vpn ssl settings:servercert)
    remote original:
    to be installed: ''

(vdom root: vpn ssl settings:status)
    remote original:
    to be installed: disable

<--- done generating verification report

Thank you in advance for your assistance on this issue.

[BillH_FTNT]

Hi @DmytroKyiv 

Is this a new device and a new installation?

Bill

[DmytroKyiv]

Hi @BillH_FTNT 

Yes, this is a new device

And it's the first device in this series in our network.