IPsec tunnel issues with 7.4?

[drimit]

Hi all,

I was thinking about upgrading to 7.4.9 but I’m seeing a few threads and posts about issues with IPsec tunnels. Is there a particular configuration type which are mainly impacted? We have many tunnels with third party vendors. Will 7.4.9 cause issues with them? Is there a patch or fix for it?

I checked 7.4.8 but it’s got a lot of vulnerabilities which are patched in 7.4.9, so I’m stuck on my decision.

Thoughts?

Thanks.

[AEK]

Hi Drimit

If I'm not wrong, the the posts about issues with IPsec on 7.4.9 are all related to dialup IPsec, not s2s.

[gabyrossi]

Hi, what problems are you having?

In version 7.4.9, the unpatched bug I see is ID: 1125487 - Autoconnect to IPsec VPN using Entra ID logon fails when there are multiple IPsec tunnels.

Are there any other documented issues?

Thanks, Gabriel

[AEK]

All known issues are documented here:

https://docs.fortinet.com/document/fortigate/7.4.9/fortios-release-notes/236526/known-issues

[gabyrossi]

Hi, Yes, those are the ones I saw. I thought there were others...

thanks

[AEK]

Sure there can be others but in they are not listed in the release notes then they are not known yet.