Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
screenie
New Contributor

FortiOS 5.6.8 issues

5.6.8 seems a bit buggy, spend last few days with troubleshooting VPN and BGP. Once configured IPSEC VPN for iOS devices on a 50E as example it works well for nearly two days, but then it's not working anymore. Phase1 negotiation fail's in any combination - error: ike Negotiate ISAKMP SA Error: ike 0:cea94de5176740db/0000000000000000:106: no SA proposal chosen SA lifetime shows mostly different in the debugs than configured. Killing the IKE process doesn't solve it - after rebooting the firewall it's again okay for about two days then it's the same again. Sometimes the 50E needed to be power cycled because rebooting on 5.6.8 it didn't came back up. Upgrading a 61E from 5.6.4 to 5.6.8 Side-2-Side VPN is up but BGP via VPN is no longer working, going back to 5.6.4 and BGP is working again.

0 REPLIES 0
Labels
Top Kudoed Authors