FortiOS 6.2.3 is out

[James_G]

I will be reading this later

https://docs.fortinet.com/document/fortigate/6.2.3/fortios-release-notes/760203/introduction-and-sup...

[emnoc · Accepted solution]

Same here, 6.2.3 is solid and works great. 

Ken Felix

[emnoc · Accepted solution]

We have both on but on all medium size 200 and 300Es, so it looks good for now. Will keep monitor.

Ken Felix

[Jirka1 · Accepted solution]

ede_pfau wrote:

thanks for responding - neither do I, I prefer to use a FAZ instead of an x1 model, better investment even in the short run...

 Hi Ede, Today I upgraded to 6.2.3: 2x 81E HA -  from version 6.0.8, all without any problems (SSL VPN, IPsec VPN, without UTM) 1x 61E - from version 6.0.8, all without any problems (SSL VPN, IPsec VPN, full UTM)

everything is connected to FAZ200D, 6.0.7

only where I had in Custom device group in Policy after the update it changed to "all" - watch it.

Jirka

[Jirka1 · Accepted solution]

Hi Ede, yes, they do

Jirka

[James_G · Accepted solution]

Awesome!

[tanr]

Copying details from https://www.reddit.com/r/fortinet/comments/eyr6g7/n00b_question_30e_623_has_broken_roku_outside/, it looks like the the bug IDs for the MTU stuff are 603899 and 593103.

A possible workaround is:

config firewall policy     edit <policy ID>        set tcp-mss-sender 1452 (or whatever is appropriate)         set tcp-mss-receiver 1452 (or whatever is appropriate)    end on all policies that involve ssl/tls handshakes or that traffic passes over where you are facing random connectivity issues.