FortiOS 5.6.4 is out.

Carl_Wallmark · ‎04-27-2018

.

FCNSA, FCNSP
---
FortiGate 200A/B, 224B, 110C, 100A/D, 80C/CM/Voice, 60B/C/CX/D, 50B, 40C, 30B
FortiAnalyzer 100B, 100C
FortiMail 100,100C
FortiManager VM
FortiAuthenticator VM
FortiToken
FortiAP 220B/221B, 11C

Toshi_Esumi · ‎05-05-2018

I tried it with 60D by forgetting about our office 60D policies use a zone that includes a physical interface (non-tagged) and multiple VLAN subinterfaces (tagged) after read through the release notes and noticed the caution "all members of the zone would be dropped". Sure enough it did.

After a TT with TAC and some own tests with another test 60D, I decided going back to 5.4.8 for the office 60D. Because only way to restore the zone (original set of policies) with all members is to remove all VLANs on the physical interface and put the phy interface as a sole member of the zone first. Then you can recreate all VLANs I removed then put them in the zone. Not only DHCP servers but some other widgets monitoring usage need to be removed before I can remove VLANs. In the middle trying this process I gave up and decided to wait the next release, 5.6.5. TAC gave me the bug ID but it's not in the "known issues" list in the release notes.

View solution in original post

tanr · ‎05-02-2018

Did support that said to wait for 5.6.5 give an estimate of when it would be available?

Sebastiaan_Koopmans · ‎05-03-2018

Hi,

We have upgraded our Fortigate 300D Cluster from 5.4.8 to 5.6.4 and so far no issues.

FortiAnalyzer / 6.4.0

FortiClient / 6.2.6 FortiClient EMS VM / 6.2.6

FortiGate 300D HA 6.2.4 FortiGate 500E HA 6.2.4 FortiGate 30E / 60E / 100E / 6.0.9 FortiMail VM HA / 6.4.0 FortiSandbox VM / 3.2.0

FortiWeb VM / 6.3.2

FortiManager VM / 6.4.0

rswinney99 · ‎05-03-2018

Is the sslvpn issue related to all ssl vpn connections (forticlient and web)? Or is it just browser based ssl vpn?

Kenundrum · ‎05-04-2018

tanr wrote:
Did support that said to wait for 5.6.5 give an estimate of when it would be available?

I opened a ticket regarding a different issue listed on the release notes and got the same response about wait for 5.6.5. When i pressed further, the response I got was that 5.6.5 has no release date estimate.

CISSP, NSE4

tanr · ‎05-04-2018

Ah well, thanks for the info Kenundrum.

FGTuser · ‎05-07-2018

Kenundrum wrote:
tanr wrote:
Did support that said to wait for 5.6.5 give an estimate of when it would be available?
I opened a ticket regarding a different issue listed on the release notes and got the same response about wait for 5.6.5. When i pressed further, the response I got was that 5.6.5 has no release date estimate.

At standard release schedule 5.6.5 can take 4-6 months. It would be nice to know if FTNT will release 5.6.5 earlier due to this bug.

Also some bug details would be helpful...

Frosty · ‎05-13-2018

Disappointed to hear about the SSL VPN issues with FortiClient. We rely on that, so cannot upgrade. We'll be staying on v5.6.2 until further notice, as it has been very stable for our environment.

Adrian_Lewis · ‎05-15-2018

Anyone know any more about this SSL-VPN issue that's been discussed? I see nothing in the release notes (that have been updated a few times since release) and can't find anything in the bug tracker on the support portal. Has anyone managed to get a bug ID from Fortinet on this?

romanr · ‎05-15-2018

Hi,

I was able to have a look into Brunos ticket. And even thugh Bruno has troubles there - there is no confirmed bug about it and support did NOT mention, that it will be fixed in 5.6.5... The support process was not even brought to a qualified end by mid last week...

We were not able to reproduce any trouble, but this was only on E series models...

Br,

Roman

Bruno_Pereira · ‎05-15-2018

Hello, I opened a ticket for this vpn ssl bug. remembering that my model is 600D, I do not know if others are affected. Support has been able to capture the crash and secondly it will be routed to development. Any news will inform you.