Please contact customer support for assistance. When using an HA reserved management interface, the local in policy needs to be configured slightly differently - please see: Use these objects instead of 'HTTPS HTTP 'in the local-in policy 1 and 2 below. If using non default ports, create appropriate service object for GUI administrative access: Limit IP addresses that can reach the administrative interface:Ĭreate the Local in Policy to restrict access only to the predefined group on management interface (here: port1): Please upgrade to FortiOS-6K7K version 6.2.13 or aboveĭisable HTTP/HTTPS administrative interface Please upgrade to FortiOS-6K7K version 6.4.12 or above Please upgrade to FortiOS-6K7K version 7.0.10 or above Please upgrade to FortiProxy version 7.0.9 or above Please upgrade to FortiProxy version 7.2.3 or above FortiCNP FortiDevSec FortiGate CNF Web Application / API Protection. Please upgrade to upcoming FortiOS version 6.0.17 or above FortiGate Public Cloud FortiGate Private Cloud Flex-VM Cloud Native Protection. Please upgrade to FortiOS version 6.2.13 or above Please upgrade to FortiOS version 6.4.12 or above Please upgrade to FortiOS version 7.0.10 or above Please upgrade to FortiOS version 7.2.4 or above Please upgrade to FortiOS version 7.4.0 or above FortiOS-6K7K version 6.2.9 through 6.2.12Įven when running a vulnerable FortiOS version, the hardware devices listed below are *only* impacted by the DoS part of the issue, *not* by the arbitrary code execution (non-listed devices are vulnerable to both):

Fort igate