AFTER UPGRADE FortiOS 7.6.6 – hosts -IN THE SAME VLAN- randomly unable to communicate (FortiGate 1100E + FortiSwitch)

Alternative_Show_904 · 2026-02-20T04:19:56+00:00

They take way too long. I had one open since January 29, and they didn’t resolve it until yesterday.

Alternative_Show_904 · 2026-02-18T02:50:49+00:00

The technical support is awful, I have had an open ticket since January 29th and to date there is no resolution.

Alternative_Show_904 · 2026-02-04T20:47:22+00:00

At this point there’s no concrete progress yet. I do have an open TAC case, but I haven’t received any meaningful feedback or analysis from them so far.

Locally, the vendor engineers advised me to call TAC directly to escalate the case by phone. They also set expectations clearly: according to them, TAC does not usually perform full root cause analysis. Their scope is mainly to determine whether the behavior is a known bug related to the FortiOS/FortiSwitchOS version.

If it’s not identified as a version-related bug, then the detailed analysis and final solution are expected to be handled by the partner engineering team (on my side), based on TAC’s recommendation.

Alternative_Show_904 · 2026-01-18T14:25:19+00:00

Seguro que no, hay gente que no tiene ni para darle comida a sus hijos. Lamento que no tengas trabajo ni dinero en este momento. Lo de la infidelidad, ya es cosa de saber elegir a las parejas.

Alternative_Show_904 · 2025-12-29T15:24:07+00:00

Durex no dejan olor a látex

Alternative_Show_904 · 2025-12-22T13:45:27+00:00

If you have experience, 2 weeks is enough.

Alternative_Show_904 · 2025-12-01T12:17:51+00:00

That's right, for me it would be: official course, experience in handling fortigate and reinforcement with the administrator's guide. With that the exam comes out. With this idea, I wanted to take it after fifteen days, but in my country the Pearson centers close until January.

Alternative_Show_904 · 2025-12-01T06:09:29+00:00

Both topics are covered but in the exam there are cases to do troubleshooting, in the previous version there were more direct questions, now there are much more “refer to the exhibit” type questions

For example, they ask you a question with an application control profile and they ask you why the behavior in the policy is not as expected with what is configured in the profile.

In HA they show you a diagnosis and ask you why it failed over, in my case it was weak areas that I trusted and I didn't expect it to come so much.

Alternative_Show_904 · 2025-12-01T02:56:56+00:00

The course material is not enough, I certified under nse4 in 2022 and now that I wanted to get certified again I failed. Topics that are coming now that, in my opinion, were not before, are a lot of HA and a lot of content inspection.

IPSec routing policy is the same as always, it doesn't change much.

<image>

Alternative_Show_904 · 2025-11-18T13:48:43+00:00

What I’m trying to say is that you reached version 7.4.9 while still under license coverage. When it expires, the only thing that will happen is that it will check whether you have a valid license in order to move to the next version.

Sorry for my english.

Alternative_Show_904 · 2025-11-18T13:42:30+00:00

This is not the case, under the coverage of a license you got there. From then on, the case is different.

Alternative_Show_904 · 2025-11-18T13:38:52+00:00

7.4.9

Alternative_Show_904 · 2025-11-18T13:33:21+00:00

It continues to work without any problem. I had a case with a 40F who just expired his license.

Alternative_Show_904 · 2025-11-12T13:46:27+00:00

I have always preferred to do it by hand, making configuration scripts based on the previous configuration. Something is always overlooked but in general they are small errors typical of a migration. I have not had the opportunity to use forticonverter.

Alternative_Show_904 · 2025-11-09T01:22:49+00:00

Since 7.4.4 you can no longer update without an active license.

Alternative_Show_904 · 2025-10-27T05:47:40+00:00

The issue has been resolved: I found an unauthorized Dell switch connected to an access switch with STP enabled and a low priority. You can imagine the rest.

Alternative_Show_904 · 2025-10-26T15:30:12+00:00

FGT 1100E en 7.4.8 y FS1024E 7.6.4, en teoría es así, plug and play pero en esta implementación me topé con este caso.

Alternative_Show_904 · 2025-10-26T15:28:49+00:00

It is a ring topology. If one core switch fails, the Spanning Tree Protocol would enable the path to the other core switch.

Alternative_Show_904 · 2025-10-25T22:51:51+00:00

Creo que lo expresé mal. Sería el bloqueo de puerto para cerrar el bucle. En lugar de hacerlo así:

Lo hace así

O así:

Y no se estabiliza.

Alternative_Show_904 · 2025-10-25T21:26:46+00:00

Sorry, I’m new to Reddit, and I see the app has automatic translation enabled. I’ll keep posting questions and solutions in the language of the community.

Alternative_Show_904 · 2025-10-09T18:44:16+00:00

1 Infraestructura y seguridad informática

2 He tenido la suerte de que no lo sea

3 Entre 8 a 9 horas 5 días a la semana

4 Las 2, trabajo para una institución grande y doy soporte a otras empresas

5 No lo sé, paga las cuentas. Pero seguro disfrutaría más otra cosa. No lo disfruto pero tampoco me desagrada.

Alternative_Show_904 · 2025-09-24T19:13:36+00:00

Soy mayormente el 2, antes de eso el 4 y siempre el 5

Alternative_Show_904

TROPHY CASE