Hot!FortiOS 6.0.1 is out!

Author
bommi
Gold Member
  • Total Posts : 126
  • Scores: 10
  • Reward points: 0
  • Joined: 2016/08/03 03:42:49
  • Location: Germany
  • Status: offline
2018/06/05 21:47:54 (permalink)
#1

19 Replies Related Threads

    bommi
    Gold Member
    • Total Posts : 126
    • Scores: 10
    • Reward points: 0
    • Joined: 2016/08/03 03:42:49
    • Location: Germany
    • Status: offline
    Re: FortiOS 6.0.1 is out! 2018/06/06 12:25:47 (permalink)
    0
    I installed it to my fortiwifi-30e without problems.
    #2
    rkhair
    New Member
    • Total Posts : 20
    • Scores: 0
    • Reward points: 0
    • Joined: 2004/12/02 07:18:50
    • Status: offline
    Re: FortiOS 6.0.1 is out! 2018/06/07 00:49:26 (permalink)
    0
    installed it on our 100d at our DC.. all seems okay so far.. will brave it for a bit longer before doing our main HQ lol
    #3
    emnoc
    Expert Member
    • Total Posts : 5020
    • Scores: 308
    • Reward points: 0
    • Joined: 2008/03/20 13:30:33
    • Location: AUSTIN TX AREA
    • Status: offline
    Re: FortiOS 6.0.1 is out! 2018/06/07 06:21:48 (permalink)
    0
    Wow  so quick ;)
     
    ken

    PCNSE,  NSE , Forcepoint ,  StrongSwan Specialist
    #4
    Dominic Lange
    New Member
    • Total Posts : 2
    • Scores: 0
    • Reward points: 0
    • Joined: 2017/05/19 01:49:36
    • Status: offline
    Re: FortiOS 6.0.1 is out! 2018/06/08 06:10:14 (permalink)
    0
    Installed it on 2 separate 50E with SD-WAN. Both crashed after a while without console output. Not pingable and nothing in the crash-log. LEDs still blinking but is not reacting to console input.
    First box had Interfaces and VPN Tunnels in SD-Wan and had some Performance SLA and it dies after 5-10 Minutes. Deleting Performance SLA could raise the time to die to about 1-3 hours.
    Second box which has only 2 WAN as SD-WAN interfaces and only ping Performance SLAs dies after about 24 hours.
    #5
    neonbit
    Expert Member
    • Total Posts : 479
    • Scores: 55
    • Reward points: 0
    • Joined: 2013/07/02 21:39:52
    • Location: Dark side of the moon
    • Status: offline
    Re: FortiOS 6.0.1 is out! 2018/06/09 03:00:45 (permalink)
    0
    Upgraded a FG201E from 6.0 to 6.0.1 and all is well. SSLVPN, IPSEC VPN all connecting correctly.
    #6
    Andy Bailey
    Bronze Member
    • Total Posts : 38
    • Scores: 2
    • Reward points: 0
    • Joined: 2016/06/27 11:21:22
    • Status: offline
    Re: FortiOS 6.0.1 is out! 2018/06/12 12:39:21 (permalink)
    0
    Hello all,

    I’ve upgraded a 60E to 6.0.1.

    Since the update the FortiView “Bytes (Sent/ Received)” counters seem to have gone wrong. For example I have one Rasberry Pi which is indicating over 817GB sent during a 24 hour period (normally it would send perhaps 5 GB and it’s config and status haven’t changed).

    Other devices seem to be reporting similarly high data volumes, while others look relatively normal.

    The Raspberry Pi is sending mainly UDP packets so it’s possible it’s just UDP traffic volumes not being recorded correctly.

    The high data volumes are also being reported through to FortiCloud and FortiAnalyzer.

    However, the figures being reported can’t be correct. The VDSL service I use has 1000 GB per month cap. And the ISP is reporting “normal” useage of around 10 GB per day. Nothing like the FortiGate reported values.

    Anyone else seeing this?

    Anyone got any ideas of what I should check?

    Thanks in advance,


    Andy.
    #7
    Dickie
    New Member
    • Total Posts : 11
    • Scores: 0
    • Reward points: 0
    • Joined: 2012/10/22 03:20:51
    • Status: offline
    Re: FortiOS 6.0.1 is out! 2018/06/12 15:18:26 (permalink)
    0
    Installed on 61E - upgrading from 6.0 - almost daily entering conserve mode. Nothing has changed on the config and on 5.6.x and 5.4.x it was as solid as a rock.  YMMV But I would proceed with caution.
    #8
    ericli_FTNT
    Gold Member
    • Total Posts : 127
    • Scores: 4
    • Reward points: 0
    • Joined: 2018/02/08 11:12:27
    • Status: offline
    Re: FortiOS 6.0.1 is out! 2018/06/12 16:38:15 (permalink)
    0
    Can you post or message me your crash log? I'm collecting feedback for new release. Thanks!
    #9
    SMabille
    Bronze Member
    • Total Posts : 52
    • Scores: 8
    • Reward points: 0
    • Joined: 2013/03/31 15:39:51
    • Status: offline
    Re: FortiOS 6.0.1 is out! 2018/06/13 03:32:04 (permalink)
    0
    Hi, 
     
    Confirmed, except not only UDP. I got 50Gb of ping reported in last 24 hours, so ICMP affected too.
    HTTP+HTTPS (TCP) reporting about 80Gb of traffic for last 24Hrs while "real" total amount (as per ISP stats) is about 20Gb.
    So looks like all protocol affected.
     
    Wondering if traffic is counted as  number of packets*mtu, which would explain why some protocols looks more affected than others.
     
    Andy Bailey
    Hello all,

    I’ve upgraded a 60E to 6.0.1.

    Since the update the FortiView “Bytes (Sent/ Received)” counters seem to have gone wrong. For example I have one Rasberry Pi which is indicating over 817GB sent during a 24 hour period (normally it would send perhaps 5 GB and it’s config and status haven’t changed).

    Other devices seem to be reporting similarly high data volumes, while others look relatively normal.

    The Raspberry Pi is sending mainly UDP packets so it’s possible it’s just UDP traffic volumes not being recorded correctly.

    The high data volumes are also being reported through to FortiCloud and FortiAnalyzer.

    However, the figures being reported can’t be correct. The VDSL service I use has 1000 GB per month cap. And the ISP is reporting “normal” useage of around 10 GB per day. Nothing like the FortiGate reported values.

    Anyone else seeing this?

    Anyone got any ideas of what I should check?

    Thanks in advance,


    Andy.



    #10
    Spidler
    New Member
    • Total Posts : 7
    • Scores: 0
    • Reward points: 0
    • Joined: 2014/08/01 06:13:26
    • Status: offline
    Re: FortiOS 6.0.1 is out! 2018/06/13 04:05:16 (permalink)
    0
    I've noticed something funky since 6.0.0 and it's continued into 6.0.1:

    When in the Fortiview section looking through Web Sites, Sources, Applications, etc. the results will display when I browse through the different areas, but eventually it starts displaying No Results Found no matter what time-frame I choose (now, 5min, 1hr, 24hrs) or what category I go into (Sources, Destinations, Applications, Websites). I usually have to log out and log back in to look through it, and then it eventually happens again. What's odd is I get a notification in the upper right hand portion of the toolbar where it displays whether you're viewing log data from the local device or from the Forticloud - it turns into an amber triangle with an exclamation mark.

    I've verified this happens on multiple 140Ds and a 200 using both Edge and Chrome (fully updated/patched). It's gotta be something simple that I borked up in the config, but it's super frustrating.
    #11
    Dickie
    New Member
    • Total Posts : 11
    • Scores: 0
    • Reward points: 0
    • Joined: 2012/10/22 03:20:51
    • Status: offline
    Re: FortiOS 6.0.1 is out! 2018/06/13 10:39:04 (permalink)
    0
    Yet another conserve mode event today.  This is only a small office so something is def not right.  I've been working all day and the memory widget shows memory usage creeping up from midday in a steady slope.  Suggests a memory leak to me.
    post edited by Dickie - 2018/06/13 10:40:12
    #12
    bommi
    Gold Member
    • Total Posts : 126
    • Scores: 10
    • Reward points: 0
    • Joined: 2016/08/03 03:42:49
    • Location: Germany
    • Status: offline
    Re: FortiOS 6.0.1 is out! 2018/06/18 04:04:12 (permalink)
    0
    I had three outages of my fortigate last week and today I had two of those events.
    Only a restart helped.
     
    I couldnt get any output over serial console in case of this event.
    #13
    Dickie
    New Member
    • Total Posts : 11
    • Scores: 0
    • Reward points: 0
    • Joined: 2012/10/22 03:20:51
    • Status: offline
    Re: FortiOS 6.0.1 is out! 2018/06/20 09:10:45 (permalink)
    0
    Another outage today with only IOT stuff connected so no 'big usage'.  This time I had the brains to try and find out what is doing it...turns out it is the WAD process.  I do not use caching, explicit proxy etc etc.
    Conserve mode  WAD 40%  After clearing sessions WAD back to 1%
     
    Hope this helps somebody or points them in the right direction.
     



    #14
    rkhair
    New Member
    • Total Posts : 20
    • Scores: 0
    • Reward points: 0
    • Joined: 2004/12/02 07:18:50
    • Status: offline
    Re: FortiOS 6.0.1 is out! 2018/06/20 09:14:58 (permalink)
    0
    Having issues with Windows updates sites being blocked by AV.. anyone seeing this also? It flags it as a virus but had no name.. started since 6.0.1 , reverted our lab to 5.6 and was back to normal.. comes up in AV monitor and forward log..
    #15
    rkhair
    New Member
    • Total Posts : 20
    • Scores: 0
    • Reward points: 0
    • Joined: 2004/12/02 07:18:50
    • Status: offline
    Re: FortiOS 6.0.1 is out! 2018/06/22 23:45:11 (permalink)
    0
    So it's a known issue and fortinet support sent me a new AV engine to fix it.. will be included in 6.0.2 apparently...

    "Our internal documentation finally revealed the issue, which was the AV engine. I have attached in this update a new AV engine. The steps to update the engine is from GUI, in System > Settings > FortiGuard > On the AntiVirus section there is an option to update database, there the new .pkg file needs to be uploaded. Upload the file wait for a few minutes and make a test. Let me know if that fixed the issue. Also it is suggested to update at version 6.0.2 and look for 0497371 bug fix."

    Minute I installed it, it fixed windows updates.

    Encase this helps someone else.

    rkhair
    Having issues with Windows updates sites being blocked by AV.. anyone seeing this also? It flags it as a virus but had no name.. started since 6.0.1 , reverted our lab to 5.6 and was back to normal.. comes up in AV monitor and forward log..
    #16
    Andy Bailey
    Bronze Member
    • Total Posts : 38
    • Scores: 2
    • Reward points: 0
    • Joined: 2016/06/27 11:21:22
    • Status: offline
    Re: FortiOS 6.0.1 is out! 2018/07/02 06:44:14 (permalink)
    0
    SMabille,
     
    Did you make any progress on this issue?
     
    I have a case open for it with support- but so far no obvious sign of resolution and they can't reproduce it (at least on simple test).
     
    Just wondered how you were getting on- maybe I could add any of your findings to the ticket if you dont have one open yourself?
     
    Kind Regards,
     
     
    Andy.
     
    SMabille
    Hi, 
     
    Confirmed, except not only UDP. I got 50Gb of ping reported in last 24 hours, so ICMP affected too.
    HTTP+HTTPS (TCP) reporting about 80Gb of traffic for last 24Hrs while "real" total amount (as per ISP stats) is about 20Gb.
    So looks like all protocol affected.
     
    Wondering if traffic is counted as  number of packets*mtu, which would explain why some protocols looks more affected than others.
     
    Andy Bailey
    Hello all,

    I’ve upgraded a 60E to 6.0.1.

    Since the update the FortiView “Bytes (Sent/ Received)” counters seem to have gone wrong. For example I have one Rasberry Pi which is indicating over 817GB sent during a 24 hour period (normally it would send perhaps 5 GB and it’s config and status haven’t changed).

    Other devices seem to be reporting similarly high data volumes, while others look relatively normal.

    The Raspberry Pi is sending mainly UDP packets so it’s possible it’s just UDP traffic volumes not being recorded correctly.

    The high data volumes are also being reported through to FortiCloud and FortiAnalyzer.

    However, the figures being reported can’t be correct. The VDSL service I use has 1000 GB per month cap. And the ISP is reporting “normal” useage of around 10 GB per day. Nothing like the FortiGate reported values.

    Anyone else seeing this?

    Anyone got any ideas of what I should check?

    Thanks in advance,


    Andy.







    #17
    SMabille
    Bronze Member
    • Total Posts : 52
    • Scores: 8
    • Reward points: 0
    • Joined: 2013/03/31 15:39:51
    • Status: offline
    Re: FortiOS 6.0.1 is out! 2018/07/02 07:01:48 (permalink)
    0
    Hi Andy,
     
    I didn't really pursue the issue (haven't opened a ticket). I think since my post I upgraded to FortiAnalyzer 6.0.1 but no improvement.
     
     
     
    Andy Bailey
    SMabille,
     
    Did you make any progress on this issue?
     
    I have a case open for it with support- but so far no obvious sign of resolution and they can't reproduce it (at least on simple test).
     
    Just wondered how you were getting on- maybe I could add any of your findings to the ticket if you dont have one open yourself?
     
    Kind Regards,
     
     
    Andy.
     
    SMabille
    Hi, 
     
    Confirmed, except not only UDP. I got 50Gb of ping reported in last 24 hours, so ICMP affected too.
    HTTP+HTTPS (TCP) reporting about 80Gb of traffic for last 24Hrs while "real" total amount (as per ISP stats) is about 20Gb.
    So looks like all protocol affected.
     
    Wondering if traffic is counted as  number of packets*mtu, which would explain why some protocols looks more affected than others.
     
    Andy Bailey
    Hello all,

    I’ve upgraded a 60E to 6.0.1.

    Since the update the FortiView “Bytes (Sent/ Received)” counters seem to have gone wrong. For example I have one Rasberry Pi which is indicating over 817GB sent during a 24 hour period (normally it would send perhaps 5 GB and it’s config and status haven’t changed).

    Other devices seem to be reporting similarly high data volumes, while others look relatively normal.

    The Raspberry Pi is sending mainly UDP packets so it’s possible it’s just UDP traffic volumes not being recorded correctly.

    The high data volumes are also being reported through to FortiCloud and FortiAnalyzer.

    However, the figures being reported can’t be correct. The VDSL service I use has 1000 GB per month cap. And the ISP is reporting “normal” useage of around 10 GB per day. Nothing like the FortiGate reported values.

    Anyone else seeing this?

    Anyone got any ideas of what I should check?

    Thanks in advance,


    Andy.











    #18
    agabekov
    New Member
    • Total Posts : 1
    • Scores: 0
    • Reward points: 0
    • Joined: 2018/07/24 15:26:35
    • Status: offline
    Re: FortiOS 6.0.1 is out! 2018/07/24 15:33:39 (permalink)
    0
    Dominic Lange
    Installed it on 2 separate 50E with SD-WAN. Both crashed after a while without console output. Not pingable and nothing in the crash-log. LEDs still blinking but is not reacting to console input.
    First box had Interfaces and VPN Tunnels in SD-Wan and had some Performance SLA and it dies after 5-10 Minutes. Deleting Performance SLA could raise the time to die to about 1-3 hours.
    Second box which has only 2 WAN as SD-WAN interfaces and only ping Performance SLAs dies after about 24 hours.


    Had the same issue with 3 50E-s, one standalone and two in HA pair, with and without SD-WAN. They were just stalling after 1-3 hours. Had to downgrade to 5.6.5, needless to say it erased config and I had to restore it from backup in remote site.
    #19
    jklapas
    Bronze Member
    • Total Posts : 47
    • Scores: 4
    • Reward points: 0
    • Joined: 2017/06/20 05:05:23
    • Status: offline
    Re: FortiOS 6.0.1 is out! 2018/08/21 07:23:13 (permalink)
    0
    Does anybody Knows the differences in the Certification of NS4 between 5.6 and 6.0
    From what i see looks the same trainning material with minor differences in number of pages ?
    I m preparing for NS4 5.6 version
    thanks
    #20
    Jump to:
    © 2018 APG vNext Commercial Version 5.5