Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
vanc
New Contributor

FortiOS 4.3.7 is out

Release notes. http://sdrv.ms/JSJXv6 Update: Latest version. Switched to skydrive for sharing.
41 REPLIES 41
Ralph1973
Contributor

Hello, I run v4.0 MR3 patch 5, is it wise to upgrade or doesn' t this make sense?
Carl_Wallmark

i would upgrade, many issues are fixed, also memory is low and stable.

FCNSA, FCNSP
---
FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30B
FortiAnalyzer 100B, 100C
FortiMail 100,100C
FortiManager VM
FortiAuthenticator VM
FortiToken
FortiAP 220B/221B, 11C

FCNSA, FCNSP---FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30BFortiAnalyzer 100B, 100CFortiMail 100,100CFortiManager VMFortiAuthenticator VMFortiTokenFortiAP 220B/221B, 11C
ddskier

I found a bug. After I upgraded from 4.2.11 to 4.3.7 the firewall would not allow me to connect to the HTTPS or HTTP management GUI using IPv6 address. However I can still get to the GUI via IPv4. I' m going to perform a reboot tonight to see if it will clear the error. I' ll let you guys know.

-DDSkier FCNSA, FCNSP FortiGate 400D, (2) 200D, (12) 100D, (2) 60D

-DDSkier FCNSA, FCNSP FortiGate 400D, (2) 200D, (12) 100D, (2) 60D
ddskier

I believe the issue is that I use a non-standard HTTPS port for managing the firewall. It seems the IPv6 side isn' t connecting using the non-standard HTTPS port even though IPv4 can connect to it. ----------------------- Here is fortinet' s response: this is a known bug that will be fixed in version 5.0.0 which will be released in June. Bug ID 0164568

-DDSkier FCNSA, FCNSP FortiGate 400D, (2) 200D, (12) 100D, (2) 60D

-DDSkier FCNSA, FCNSP FortiGate 400D, (2) 200D, (12) 100D, (2) 60D
billp

After I upgraded from 4.2.11 to 4.3.7 the firewall would not allow me to connect to the HTTPS or HTTP management GUI using IPv6 address. However I can still get to the GUI via IPv4.
If this is the most significant bug to surface on the forums for this release, I' d say things are looking up

Bill ========== Fortigate 600C 5.0.12, 111C 5.0.2 Logstash 1.4.1

Bill ========== Fortigate 600C 5.0.12, 111C 5.0.2 Logstash 1.4.1
Carsten_Treuner

no problems with ipv6 and the gui
Carl_Wallmark

Well, i found a bug When selecting " Web Cache" in a firewall policy for HTTP, the statistics on the dashboard for HTTP is broken. But using " Web Cache" under the " Wan Opt" menu works as expected.

FCNSA, FCNSP
---
FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30B
FortiAnalyzer 100B, 100C
FortiMail 100,100C
FortiManager VM
FortiAuthenticator VM
FortiToken
FortiAP 220B/221B, 11C

FCNSA, FCNSP---FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30BFortiAnalyzer 100B, 100CFortiMail 100,100CFortiManager VMFortiAuthenticator VMFortiTokenFortiAP 220B/221B, 11C
tonylealea

But using
Hi : Does any one can tell me how to config/enable web cache on C serial like FG600C ? and Does FG600C can running 4.3.7 ?
laf
New Contributor II

Hi guys, Just installed it on my HQ Firewall and noticed that SSL VPN works from browser. I tested it on Win 7 x32 and Win XP x32. Is it " for real" ?

The most expensive and scarce resource for man is time, paradoxically, it' s infinite.

The most expensive and scarce resource for man is time, paradoxically, it' s infinite.
vanc
New Contributor

ORIGINAL: laf Hi guys, Just installed it on my HQ Firewall and noticed that SSL VPN works from browser. I tested it on Win 7 x32 and Win XP x32. Is it " for real" ?
Isn' t it designed to be like that? I remember the first tunnel mode SSL VPN client could run in my IE6. As long as you log in as an administrator the first time you run the tunnel, the client should be able to install the SSL VPN daemon service and related drivers. After that, regular user can use the tunnel mode from web browser as well. IE8 and above have better security control on ActiveX. If you don' t click the information bar on top of the browser window, you won' t be able to do the installation as well.
Labels
Top Kudoed Authors