FortiOS 5.4.3 is out

[FGTuser]

Xmas surprise

Upgraded all E-series + 80D. Will see...

[mas1971]

I did a try and upgrade from 5.2.10 to 5.4.3 on Fortigate 60D,

but there where some Routing or policy issues with VPN (Ipsec, Site:Site)

After expermintal 2 hours to fix this i go back to 5.2.10

There are a lot of changes in 5.4 Fortios (and a horrible green GUI)

i missed color tags in 5.4.3:

(perhaps the only thing was, i dont find out how to enable it)

in 5.2.10 it works like:

config system global

  set gui-object-tags {disable | enable}

[mike_dp]

Anyone else had issues with 5.4.3?

All of our Fortigates are on either 5.4.1 or 5.4.2 and looking to upgrade to 5.4.3

[MikePruett]

I have been pushing production units to 5.4.3 with no issue.

[bmekler]

So far I have two FWF50Es, three FGT60Es, one FGT100D and two FGT200Ds (clustered pair) on 5.4.3, no noteworthy issues.

[NeilG]

So far 60D on 5.4.3 with proxy based DeepSSL inspection and fortiguard categories with local category exceptions and Forticloud-Sandbox configured AV profile seems to be much better than 5.4.1 or 5.4.2. Over a month without hitting conserve mode.

Minor issues so far: auto-scripts not able to execute backup to forticloud.

With all of the filtering there is still a notable performance hit but so far the users have been happy.

I still need to upgrade the FortiAP: Currently running FP221C-v5.4-build0339 (which I think is 5.4.1)

-Neil

[laf]

Revamping this thread. Any noticeable issues with this version? I am using 5.4.2 on FGT50E and from what I read 5.4.4 is not that nice. 

What's the best 5.4 version guys?

[NeilG]

Can you clarify what is the impact of the following item in the known issues:

http://docs.fortinet.com/uploaded/files/3465/fortios-v5.4.3-release-notes.pdf

Bug:

393267 Not possible to edit existing Web Filter profile.

Does this mean that we can't make changes in GUI, CLI, both. Does this only apply to upgraded web filter profiles?

Can we Copy a profile and edit that?

-Neil

[neonbit · Accepted solution]

Hi Neil,

Just tested configuring web-filter profiles and was able to edit an exiting profile that was upgraded from 5.4.2 > 5.4.3. Was also able to create a new one and edit that too.

[NeilG]

Neonbit,

Thank you for doing that!!

-Neil