Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
Carl_Wallmark
Valued Contributor

FortiOS 4.00 MR2 is out !

.

FCNSA, FCNSP
---
FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30B
FortiAnalyzer 100B, 100C
FortiMail 100,100C
FortiManager VM
FortiAuthenticator VM
FortiToken
FortiAP 220B/221B, 11C

FCNSA, FCNSP---FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30BFortiAnalyzer 100B, 100CFortiMail 100,100CFortiManager VMFortiAuthenticator VMFortiTokenFortiAP 220B/221B, 11C
62 REPLIES 62
romanr
Valued Contributor

MR2 seems to have problems with the ipsengine, like early 4.0 and some of 3 MR5 and MR6 builds had.... ipsengine uses all cpu but you can restart it easily! regards, Roman
snowman386
New Contributor III

how do you restart it so easily? since our upgrade to MR2, cpu has been a steady 95-99%!
romanr
Valued Contributor

ORIGINAL: snowman386 how do you restart it so easily? since our upgrade to MR2, cpu has been a steady 95-99%!
Find the process id via: diag sys top and kill the ipsengine daemon (if it is it, that eats up all the cpu) with: diag sys kill 8 <PID> regards, Roman
g3rman
New Contributor

You can also try: diag test app ipsmonitor 99 which restart the IPS engine. Take a look at this blog post: http://firewallguru.blogspot.com/2008/06/problems-with-ips-engine.html
A Real World Fortinet Guide Configuration Examples & Frequently Asked Questions http://firewallguru.blogspot.com
A Real World Fortinet Guide Configuration Examples & Frequently Asked Questions http://firewallguru.blogspot.com
BBoysza
New Contributor III

IPS Engine bug 122860. I was suppled with a patch: nids-400-1162-122860_V4.2.pkg after crushing a 110C. Rolled back so I have not verifed the fix.
Ben McFortiGate - Over 200 deployed. FCNSP Direct FortiNet FTP Link
Ben McFortiGate - Over 200 deployed. FCNSP Direct FortiNet FTP Link
Carl_Wallmark

Do you need to get the patch from support or will it be distributed via FortiGuard as normal ?

FCNSA, FCNSP
---
FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30B
FortiAnalyzer 100B, 100C
FortiMail 100,100C
FortiManager VM
FortiAuthenticator VM
FortiToken
FortiAP 220B/221B, 11C

FCNSA, FCNSP---FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30BFortiAnalyzer 100B, 100CFortiMail 100,100CFortiManager VMFortiAuthenticator VMFortiTokenFortiAP 220B/221B, 11C
Yngve0
New Contributor II

Installed on a test box so far; The biggest benefit I found with this new GUI is that it is easier to switch between different VDOM. I, as other mentioned, also miss the delete/edit option on each entry. Multiselect is nice for multideleting, but makes it harder to find entries that is not in use. Under IPSEC/AutoKey there are no actions, neither for Add, delete og edit. How to create ipsec-tunnels? Y
Carl_Wallmark

Under IPSEC/Autokey you have 4 buttons: " EDIT " DELETE" " Create Phase1" " Create Phase2"

FCNSA, FCNSP
---
FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30B
FortiAnalyzer 100B, 100C
FortiMail 100,100C
FortiManager VM
FortiAuthenticator VM
FortiToken
FortiAP 220B/221B, 11C

FCNSA, FCNSP---FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30BFortiAnalyzer 100B, 100CFortiMail 100,100CFortiManager VMFortiAuthenticator VMFortiTokenFortiAP 220B/221B, 11C
Yngve0
New Contributor II

Hm?? Thanks,Found it in Google chrome, but IE7 reports error on page. . . .
Carl_Wallmark

im using IE8, some users have reported that they had to empty there webbrowser cache, try that !

FCNSA, FCNSP
---
FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30B
FortiAnalyzer 100B, 100C
FortiMail 100,100C
FortiManager VM
FortiAuthenticator VM
FortiToken
FortiAP 220B/221B, 11C

FCNSA, FCNSP---FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30BFortiAnalyzer 100B, 100CFortiMail 100,100CFortiManager VMFortiAuthenticator VMFortiTokenFortiAP 220B/221B, 11C
Labels
Top Kudoed Authors