Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
d_konyayev
New Contributor III

Fortigate 90G firmware Bugs

Hey guys. I am an FGT90G owner.
I have tested firmware 7.0.12, 7.0.13, 7.0.14, 7.0.15.
1. On all firmware there is a problem with Traffic Shaping Policies.
I have configured a few rules in Traffic Shaping Policies. The network works fine, but after a few hours, all traffic that matches these rules stops working. After that, I disable the rules in Traffic Shaping Policies and my network works again.
If I re-enable the rule in Traffic Shaping Policies, the network does not work.

In the logs I see errors - Session time out.

TimeOut.jpg


The problem is solved only after rebooting the FortiGate.

But on firmware 7.0.12, if you turn off the rules in Traffic Shaping Policies and turn on the shaper in Firewall Policies, the Network works without problems. (26.07.2024 - The problem returns if I make changes in Trafic Shaper. Solution: Reboot the FortiGate)

 

Policy.jpg

 

 

2. Second problem.
It is only present in versions 7.0.13, 7.0.14, 7.0.15.
I have 29 routers of Zyxel usg-20-vpn connected to FGT90G as Dial-Up IpSEC.
After rebooting the FGT90G or Zyxel, no access to the internal network of some Zyxel.
After entering the command "get router info routing-table all ", I see:
S 10.1.51.0/24 [15/0] via Vpn-Ike2-Tun_KT tunnel 10.0.0.22, [1/0]
[15/0] via Vpn-Ike2-Tun_NL tunnel 44.7.263.77

Screenshot_1.jpg

 

But PING to 10.1.51.0/24 doesn't work.
I enter the command: "diagnose vpn tunnel flush"
After that I can see the network 10.1.51.0
After entering the command "get router info routing-table all ", I see:
S 10.1.51.0/24 [15/0] via Vpn-Ike2-Tun_KT tunnel 44.7.263.77, [1/0]

This problem is not present on firmware 7.0.12.

 

11 REPLIES 11
d_konyayev
New Contributor III

"Yes, my friend, the issue is still present in version 7.4.7, but it happens less often than in previous versions. I received a message from technical support; they know about this bug and have promised to fix it in version 7.4.8." 

"Dear Mr. Konyayev, The issue with the 90G appliances and traffic-shaping should be fixed on releases 7.4.8 (expected to be released between 2025-04-22 and 2025-04-30) and 7.6.3 (expected to be released between 2025-04-08 and 2025-04-10) and it is already fixed on release 7.2.11 - "

d_konyayev
New Contributor III

https://youtu.be/_MwJDnRvXjA -  Example of a problem 

 

 

Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors