Fortinet FortiADC D-Series Handbook

FortiADC 4.3.1

Chapter 1: What’s New l l

You can now specify exceptions per WAF profile or per policy. Exceptions identify specific hosts or URL patterns that are not subject to processing by WAF rules. See

Configuring a WAF Profile

Additional WAF HTTP protocol constraint rules. See

Configuring a WAF Profile .

Monitoring and Logs l l l l

Added a Network Map tab to the dashboard. In the Network Map, each virtual server is a tree. The status of the virtual server and real server pool members is displayed. See

Chapter 20: System Dashboard .

Added on-demand and scheduled reports for many common queries. You can also configure custom queries. See

Configuring reports

.

Added event log categories and added a column in logs to support future integration with FortiAnalyzer. Removed the Download Logs page. Each log category page now has a Download button. See

Using the event log

.

Enhanced SNMP MIBs and traps. See

Appendix A: Fortinet MIBs

for information on downloading the vendorspecific and product-specific MIB files.

System l l l l l l l

Shared Resources—Merged the address and service configuration for firewall and LLB. Added address groups and service groups, which can be used in LLB policy rules. See

Chapter 10: Shared Resources

.

Routing—Support for OSPF authentication. See

OSPF

.

HA—Added option to actively monitor remote beacon IP addresses to determine if the network path is available.

See

Configuring HA settings

.

System—Updated the web UI to match CLI configuration options for global administrator and access profile. See

Managing administrator users .

Web UI—Support for Simplified Chinese. See

Configuring basic system settings

.

Troubleshooting—New commands: diagnose debug flow, diagnose debug report, diagnose debug timestamp , execute checklogdisk, and execute fixlogdisk. See the FortiADC CLI

Reference .

CLI—Added execute ssh and execute telnet for connections to remote hosts.

API l

REST API—Remote configuration management with a REST API. See the FortiADC REST API Reference .

FortiADC 4.3.1

l l l

Server Load Balancing Persistence—Added a Match Across Servers option to the Source Address affinity method.

This option is useful when the client session for an application has connections over multiple ports (and thus multiple virtual servers). This option ensures the client continues to access the same backend server through different virtual servers for the duration of a session.

Server Load Balancing TCP Multiplexing— Added support for HTTPS connections.

Global Load Balancing DNS Server—The negative caching TTL in the SOA resource record is now configurable.

FortiADC 4.3.1

l l

Virtual domains—Increased the maximum number of VDOMs on the following platforms:

FortiADC 700D — 30

FortiADC D-Series Handbook

Fortinet Technologies, Inc.

21