FortiOS 5.4.5

[bommi]

FortiOS 5.4.5 is out:

http://docs.fortinet.com/...os-5.4.5-release-notes

[Toshi_Esumi]

It would be more helpful if you could share what model of FGT you upgraded to 5.4.5 :)

[Sebastiaan_Koopmans]

Sorry forget to mention.

We upgraded 2x FGT 300D (HA Cluster) from 5.4.4

[bommi]

I did the upgrade on a 1000D Cluster.

One of my customers did the upgrade on a 300D Cluster.

Both had some 5.4.x version before that upgrade.

[arichard42]

Upgraded a 90E and a 90E cluster from 5.4.4 without problem.

For me it solved 2 problems : 

- a traffic hangup on VIP policies with App Control

- SpaningTree BPDU reception is not filtered any longer, so SPT is now working

Up to now, no new problem.

Alain

[Ray]

We upgraded the firmware of a FortiGate 100E from FortiOS 5.4.4,b6003 to 5.4.5,b6225. Two problems found:

[ul]

one interface down after firmware upgrade - the interface port15 did not come up. The link was down until we rolled back the firmware. Port15 is the interface that can be a copper port or SFP.

on the admin gui console, there was an alert "Power supply 2 failure" but we don't have a DC backup power supply connected to this unit. No such alert found after we rolled back the firmware.[/ul]

 We've opened a ticket.

[tanr]

Per the release notes (and as mentioned previously in this thread):

Known Issue: FortiGate-100E / 101E 416678 Multiple reports of firewall lockups in production.  

I think 100E users will want to wait for the next version.

[Ray]

http://docs.fortinet.com/uploaded/files/3770/fortios-v5.4.5-release-notes.pdf

416678 is a resolved issue on page 29 of the 5.4.5 release notes.

[Toshi_Esumi]

Scroll this thread up a little bit. We discussed about this double-listed bug ID.

[Ray]

The 5.4.5 release notes were updated multiple times. On page 5 of the Jun 26, 2017 version at http://docs.fortinet.com/....4.5-release-notes.pdf : 2017-06-13 Removed 416678 from Known Issues.

So perhaps it was a typo on earlier release notes versions to have 416678 in the Known Issues section.

I do agree that it's better off to skip 5.4.5 on 100E. 

[Abdulaziz_Alatar]

hello,  I upgraded my fortigate 60D, I have two issue one important . I enabled new license fortiguard package I updated all package with success but Botnet domain database stilled with version 0, no URL in database. I think Search engine less power and log keyward not work. In Fortigate 90D delay when opened FortiView source or destination .