Fortigate 90G upgrade from 7.4.7 to 7.4.8: SSLVPN disappears ?? WEIRD!!

[ITDepart]

Today we update our Fortigate 90G witn 8GB ram from 7.4.7 (with sslvpn tunnel mode active) to 7.4.8 and the SSLVPN dissapears!!!!

THIS IS REALLY WEIRD!!!

We contact to support a give me this answer:
---> https://docs.fortinet.com/document/fortigate/7.4.8/fortios-release-notes/743723/new-features-or-enha... <----
--> Resolved issued -> bug id 1026775 Remove SSL VPN from FG9xG.

WTF!!! Fortinet delete SSLVPN a publish in a resolved issue??????????

[kaman]

Hi ITDepart,

Yes, the SSL VPN web and tunnel mode feature will not be available from the GUI or the CLI on the FortiGate 90G and 91G models. Settings will not be upgraded from previous versions.

It is the hardware limitation of FortiGate 90G

Regards,
Aman

[ITDepart]

@kaman  Can you explain how a fortigate witn 8GB of ram has "hardware limitation" ???

• yesterday: Fortigate 90G firmware 7.4.7 with 25 remote users working with SSL VPN without any problem for 8 months
• today: same fortigate 90G firmware 7.4.8 with no SSLVPN because "hardware limitations" 

Really? This all the client support of Fortinet? "hardware limitations" ......

WEIRD!

Please @kaman can you explain better the mean of "hardware limitations" of FG90G?

[Rino_B]

Fortinet has been in the process of removing SSL-VPN (tunnel mode) from FortiOS. In the process, first the 2GB models were phased out followed by some G series models. Since FortiOS 7.6.3, the feature has been completely removed.

The availability of SSL-VPN on the FortiGate 90G was not intended and therefore flagged as a BUG.

Please check: https://community.fortinet.com/t5/FortiGate/Technical-Tip-SSL-VPN-support-on-FortiGate-models/ta-p/3...

[ITDepart]

Thanks @Rino_B I'm informed about the change in the 7.6.X branch.

But I'm talking about 7.4 branch... but nobody answers my questions:

1. Why Fortigate 90G has flagged sslvpn as a bug? what exactly is the hardware limitation?
2. Do you think it is good bussines practice to remove a service in a minor upgrade and publish it as a "resolved issued" ?

[Rino_B]

HI @ITDepart 

1. It is not a hardware limitation (as far as I know) but a decision made by the product development team.
2. This is embarrassing especially since 7.4.8 and 7.2.12 are mature versions. On the other hand, Fortinet has been saying for months that it will no longer offer SSL-VPN (tunnel) functionality in new firmware versions and FortiGate models.

Please check: SSL VPN support on FortiGate models - Fortinet Community (updated today)

[ITDepart]

I would have liked this document to be published at the time the firmware is released and not after. We are in process to migrating to IPSec, but eliminate the VPNSSL service without a better notification... :(

[Rino_B]

That document was published a year ago: https://docs.fortinet.com/document/fortigate/7.4.4/ssl-vpn-to-ipsec-vpn-migration/126460/introductio...

[Rino_B]

Yesterday, Fortinet updated the FortiOS 7.4.8 release notes: https://docs.fortinet.com/document/fortigate/7.4.8/fortios-release-notes/205987/ssl-vpn-not-supporte...