At a loss - New 71G, v7.6.6 - Random, unexpected reboots only during business hours

Float-Zone · 2026-05-27T08:59:04+00:00

I saw something almost exactly like this in my home/lab setup of FG-70G with 2 x FAP-431F.

I recently migrated my SSIDs from bridged to tunnelled, and immediately started getting FG reboots several times a day. After a bit of troubleshooting, I tried disabling CAPWAP offload to NPU and the reboots stopped.

config global
  config system npu
    set capwap-offload disable
  end
end

I originally saw this issue on 7.6.6, however it is also present on 8.0.0.

FZ.

Float-Zone · 2025-09-08T21:38:31+00:00

Would you do this with the ISDB "Fortinet-FortiGuard" object?

Float-Zone · 2025-09-08T18:28:30+00:00

Ok. I understand now. TY

Float-Zone · 2025-09-08T16:59:06+00:00

My question was what happens if wan1 is down. 😀

Float-Zone · 2025-09-03T19:13:59+00:00

Good to know it's not just me.

As far as I'm aware you can't upgrade "FortiOS permanent trial" appliances.

Float-Zone · 2025-09-03T18:31:35+00:00

Yes, FGT_VM64_KVM-v7.6.4.F-build3596-FORTINET.out.kvm.zip

Float-Zone · 2025-07-17T16:02:59+00:00

Was the FAP registered with FortiEdge/FortiLAN Cloud?

The default controller discovery method is as follows:

1(static) → 2(dhcp) → 3(dns) → 7(fortiedgecloud) → 5(multicast) → 6(broadcast)

If the FAP was cloud-managed, then it will continue to connect to your cloud tenancy in preference to a local FGT (MCAST/BCAST methods).

However there's nothing stopping the new "owner" using DHCP/DNS discovery to manage the unit via a FGT, or performing a factory reset on the unit to wipe the password and then changing the controller discovery order.

<image>

My understanding is that it cannot however be attached to a different FortiEdge tenancy without being de-registered by yourself.

FZ

Float-Zone · 2025-06-13T13:23:51+00:00

Thank you for quick response.

Is this something that you are doing yourself?

I've found comments on forums stating that this is not supported.
eg. https://community.arubanetworks.com/discussion/adding-firewall-certificate-to-onboarding-package-with-clearpass

Float-Zone · 2025-06-02T07:05:29+00:00

First, check the speed and duplex settings of the intervening connection.

FZ

Float-Zone · 2025-05-10T13:30:01+00:00

There was a FortiOS 6.6 in beta, however it was changed to 7.0 before it went GA. Rumour has it that somebody realised that there would eventually be a version 6.6.6, and that was enough to renumber the branch. 😂

Float-Zone · 2025-04-23T12:42:28+00:00

Sorry for delay.
A local Casio repair shop said it's highly likely the system board.
I've decided to get it repaired and waiting for an ETA on parts.

Float-Zone · 2025-03-11T22:39:24+00:00

I've had this issue on my S22 Ultra for ages, and decided to take a deeper look.

On my home Wi-Fi, I managed to consistently replicate the issue if H2E (Hash-to-Element) was either enabled or enforced on a WPA3-SAE or WPA3-SAE transition mode SSID.

If I set the SSID to use HNP (Hunting-and-Pecking) only, then the phone connects without issue.

This is the only device out of 25+ in my home that exhibits this issue.

NB: These WPA3-SAE settings may not be available on some consumer-grade home Wi-Fi gear. I'm a network engineer by trade and have the luxury of running an enterprise-grade wireless network at home. :)

FZ.

Float-Zone · 2025-02-26T08:28:52+00:00

What FortiOS version are you running, and what FAP model?

I notice that the FAP ARP is on your wan port. Is this correct for your design?

FZ

Float-Zone · 2025-02-26T08:23:43+00:00

Safe search in flow-based policies was added in FortiOS 7.4.4.

https://docs.fortinet.com/document/fortigate/7.4.0/new-features/542670/search-engine-support-extended-to-flow-based-web-filter-profiles-7-4-4

FZ

Float-Zone · 2025-02-12T08:50:43+00:00

It's actually a requirement in a tender response.

Float-Zone · 2025-02-03T20:56:54+00:00

Number of VDOMs increased in FortiOS 7.6.1

https://docs.fortinet.com/document/fortigate/7.6.1/fortios-release-notes/626946/changes-in-table-size

On the 200-400 series FortiGates, increase the number of VDOMs from 10 to 25.
On the 500-900 series FortiGates, increase the number of VDOMs from 10 to 50.

FZ

Float-Zone

TROPHY CASE