FortiOS 5.2.7 is out

[Carl_Wallmark]

.

[vladimircze · Accepted solution]

Hi,

12 hours ago upgraded 100D cluster from 5.2.3 to 5.2.7 (using 5.2.5 as intermediate version in upgrade path).

Features used:

A-A cluster,

web filter,

IPS,A/V, APPL Sensors, content SSL Inspection

WiFi (WPA2-enterprise and WPA2-Personal)

SSL VPN, IPSEC VPN

OSPF, LACP

5 VDOM.

So far so good.

Vladimir, Prague, Czech Republic.

[netmin · Accepted solution]

I don't believe this is a bug. I remember having seen a changelog or release note referring to the built-in account "FGT_ha_admin", which was originally used for exec ha manage:

"You log into the subordinate unit using the FGT_ha_admin administrator account. This built-in administrator account gives you read and write permission on the subordinate unit. Normally this built-in administrative account is not visible, however FGT_ha_admin does appear in event log messages."

I think the account was removed (for security reasons) ... [strike]I can't find the corresponding document anymore, maybe a later document revision had this piece of information removed as well.[/strike]

Edit: found it - the release notes downloaded from the support portal provide(d) this information.

[Baptiste]

Release notes : http://docs.fortinet.com/uploaded/files/2967/fortios-v5.2.7-release-notes.pdf

[storaid]

some known issues are annoying..=_="

* Users may not be able to create new address objects from the Firewall Policy.

* All sessions: filter application, threat, and threat type, may not work as expected

* If the client is connecting to an SSID with WPA-Enterprise and User-group, it may not be able to pass the traffic policy.

* When creating an id_based policy with SSL enabled, and the set gui-multipleutm disable is applied, an Entry not found error message may appear.

* When navigating FortiView > Application some security action filters may not work.

[pcraponi]

I think these "know issues" are not 5.2.7 only. I have some of these bugs in previous versions. Apparently they are all 5.2.x bugs opened.

[JohnAgora]

Anyone found the file "What’s New for FortiOS 5.2.7 "?

Thanks!

[emnoc]

Here's the link & click on 5.2

http://docs.fortinet.com/fortigate/release-information

Ken

[JohnAgora]

I just found the one on 5.2.5.

Cheers!

[donnat]

Maybe there will be no new features in 5.2, but only bug fixes... and the new features will be to v5.4 ... I hope ... and thank you advance to correct any bugs in 5.2.8... Pleeeeeeeaaaaaaaaaase

[vladimircze · Accepted solution]

Hi,

12 hours ago upgraded 100D cluster from 5.2.3 to 5.2.7 (using 5.2.5 as intermediate version in upgrade path).

Features used:

A-A cluster,

web filter,

IPS,A/V, APPL Sensors, content SSL Inspection

WiFi (WPA2-enterprise and WPA2-Personal)

SSL VPN, IPSEC VPN

OSPF, LACP

5 VDOM.

So far so good.

Vladimir, Prague, Czech Republic.

[AtiT]

I updated an A-P cluster from 5.2.4 to 5.2.7 (via 5.2.6). Now when I want to connect to the subordinary unit with command #execute ha manage <id> the username and password needed to be entered. Is it a new feature? I did not find it in the release notes or I missed something?

It could be a problem on an A-P cluster when external user authentication is used for admins like LDAP etc. as the passive unit will not authenticate the user.