SoftHub

Bug Fixes:

- Fixed the issue where the web interfaces are vulnerable to SQL injection, HTTP header injection, and Cross-Site Scripting.

- Fixed the issue where the logs are not displayed properly in the GUI and on Syslog server.

- Fixed load balancing mode, VPN traffic is sent on other non-VPN policy WAN interface.

- Fixed the issue where the GUI does not display the L2TP active users.

- Fixed the issue where it is not possible to add one IP address to two different IP groups.

- Fixed DHCP relay issues.

- Fixed the issue where the IPsec VPN is disconnecting from the client even when the IPsec VPN tunnel shows as established with the Fortigate Firewall.

- Fixed the issue where the Firewall Rules do not work when MAC Filtering is enabled and a MAC address is added.

- Fixed the issue when a schedule is set to "Daily or Weekly", and the time to 12:00 AM, it always switched back to 1:00 PM.

- Fixed an issue for client to gateway VPN, in changing WAN IP as Local Identifier in IPsec settings.

- Fixed the issue where the firewall logs contain incomplete logs messages.

- Fixed the issue where the device is vulnerable to CVE-2012-5958 and CVE-2012-5959.

- Fixed the issue when using wizard configuring, remote IP has .0 in fourth octet which is not allowed.

- Fixed the Firefox issue when accessing a second FVS336Gv3 device, gets an error code: sec_error_reused_issuer_and_serial.

- Fixed the issue where the device kept losing WAN DNS Servers.

- Fixed the issue where the LAN Groups take a long time to be displayed.

- Fixed the issue where the outbound UDP firewall rules do not work with service groups.

Known Issues and limitations:

- Not able to establish IPv6 SSL-VPN tunnel from java based browsers with java 8 update 20 version.

- Unable to run the FTP traffic from FileZilla client over SSL Port forwading tunnel in the Windows7 64 bit host.

- Unable to establish port forwarding tunnel from Windows7 64 bit IE9 browser.

- Internet Traffic Statistics are not getting updated correctly in auto rollover mode

- NFS service support: Only support NFS v4 "mount" command, do not support NFS v2, v3 and "showmount" command.

- No NAT translation of SIP headers during REGISTER, outbound call and SDP.

- Observed inconstistent behaviour with voice traffic when server is lying in LAN and DMZ side.

- Unable to establish the fourth call from LAN side.

- Unable to establish the IPv6 manual tunnel with traffic selector as ANY/ANY.

- Able to Configure IPv6 Address pools and DMZ adverisements prefixes through CLI when DMZ is not enabled.

- [CLI]Firewalllogs6 table is not updating properly for enabling and disabling logs through CLI.

- Able to run Port triggering inbound traffic with the open port from any WAN hosts.

- Daylight saving functionality is not working for time zone "GMT-0"

- PPPoE over IPv6 WANs are getting restarted and IPv4 WAN is not responding after changing WAN mode for multiple times.

- Able to establish VPN gw-gw tunnel with mismatch user-FQDN and able to run traffic.

- Traffic is not following WAN upload or down load(higher one of them )speeds if the upload and down load speeds having large difference.

- Unable to establish L2TP connection from WAN secondary addresses fail.

- [IPv6]Unable to run the FTP ,http,iperf traffic on pppoe over IPv6 with DHCP option as "Disable-DHCPv6"

- Able to select same WAN for both primary and secondary WANs for auto rollover WAN mode in IPv4/IPv6 dual stack mode.

- Unable to get the IP to LAN host after rebooting the device continuously for over night.

- [IPv6]Displaying the message as address not found instead of 'Blocked from this Browser' for IPv6 policy 'Deny Login From Defined Browsers.'

Note:

- Support 50 VoIP phone calls.

- Supported characters: `~!#$&*()-+|;:' " < > and space. Restricted these characters in password fields due to security reasons [to avoid the SQL attacks etc.,].

Installation Instructions:

- Download and extract the new firmware to a convenient place such as you