OSPF Adjacency Loss after 7.2.11 Upgrade

[marara1]

We were running v7.2.10 on multiple hardware platforms without issue. Security came along and told us we had to update software due to a CR so we are now running v.7.2.11.

Since the update our Firewalls are now losing OSPF adjacencies to the core switches every couple days or so. The biggest offender only has one instance of OSPF running but some Firewalls have 4-5 instances of OSPF running (multiple VDOMs) and we lose adjacency on all vdoms simultaneously.

I don't think it's a resource issue; we have beefy hardware; 4201F, 2601F, 1801F.

Anyone else seeing this? Any workarounds?

As always, thanks!

[Toshi_Esumi]

We have multiple 1000F HA pairs and at least 2 VDOMs on each cluster have OSPF neighborings with Cisco and Juniper routers. We upgraded those from 7.2.10 to 7.2.11 last month but they're still working fine.
You should open a ticket at TAC and get the symptom looked into. It's very situational, case by case, and difficult to troubleshoot over this discussion thread when it comes down to like routing protocol's intermittent disconnect issues.

Toshi

[Kangming]

Hi marara1,

There is indeed a mantis inside investigating it:

NP7 FGT randomly stop responding packets after upgrade from 7.0.14 to Fortigate 7.2.11
Workaround: Disable offload on policy rules