FortiOS 4.3.7 is out

[vanc]

Release notes. http://sdrv.ms/JSJXv6 Update: Latest version. Switched to skydrive for sharing.

[Ralph1973]

Hello, I run v4.0 MR3 patch 5, is it wise to upgrade or doesn' t this make sense?

[Carl_Wallmark]

i would upgrade, many issues are fixed, also memory is low and stable.

[ddskier]

I found a bug. After I upgraded from 4.2.11 to 4.3.7 the firewall would not allow me to connect to the HTTPS or HTTP management GUI using IPv6 address. However I can still get to the GUI via IPv4. I' m going to perform a reboot tonight to see if it will clear the error. I' ll let you guys know.

[ddskier]

I believe the issue is that I use a non-standard HTTPS port for managing the firewall. It seems the IPv6 side isn' t connecting using the non-standard HTTPS port even though IPv4 can connect to it. ----------------------- Here is fortinet' s response: this is a known bug that will be fixed in version 5.0.0 which will be released in June. Bug ID 0164568

[billp]

After I upgraded from 4.2.11 to 4.3.7 the firewall would not allow me to connect to the HTTPS or HTTP management GUI using IPv6 address. However I can still get to the GUI via IPv4.

If this is the most significant bug to surface on the forums for this release, I' d say things are looking up

[Carsten_Treuner]

no problems with ipv6 and the gui

[Carl_Wallmark]

Well, i found a bug When selecting " Web Cache" in a firewall policy for HTTP, the statistics on the dashboard for HTTP is broken. But using " Web Cache" under the " Wan Opt" menu works as expected.

[tonylealea]

But using

Hi : Does any one can tell me how to config/enable web cache on C serial like FG600C ? and Does FG600C can running 4.3.7 ?

[laf]

Hi guys, Just installed it on my HQ Firewall and noticed that SSL VPN works from browser. I tested it on Win 7 x32 and Win XP x32. Is it " for real" ?

[vanc]

ORIGINAL: laf Hi guys, Just installed it on my HQ Firewall and noticed that SSL VPN works from browser. I tested it on Win 7 x32 and Win XP x32. Is it " for real" ?

Isn' t it designed to be like that? I remember the first tunnel mode SSL VPN client could run in my IE6. As long as you log in as an administrator the first time you run the tunnel, the client should be able to install the SSL VPN daemon service and related drivers. After that, regular user can use the tunnel mode from web browser as well. IE8 and above have better security control on ActiveX. If you don' t click the information bar on top of the browser window, you won' t be able to do the installation as well.