FortiAP Release Notes

FortiAP

FortiAP, 7.4.1, Release Notes

[[[Undefined variable FortinetVariables. ]]]

FortiAP 7.4.1 Release Notes

17 hours ago — 924432. Enable DFS channels for FAP-231G/233G with region code "F". 924783 ... 761298. FAP-234F Bluetooth Low Energy (BLE) function cannot work. FortiAP 7.4 ...

[PDF] FortiAP 7.4.1 Release Notes - AWS

928319. With a single 802.3at (PoE ) power supply, FortiAP-431G/433G should support 2.4GHz,. 5GHz, and 6GHz 4x4 MIMO while reducing the ...

PDF preview unavailable. Download the PDF instead.

fortiap-v7.4.1-release-notes
Release Notes
FortiAP 7.4 .1

FORTINET DOCUMENT LIBRARY https://docs.fortinet.com FORTINET VIDEO GUIDE https://video.fortinet.com FORTINET BLOG https://blog.fortinet.com CUSTOMER SERVICE & SUPPORT https://support.fortinet.com FORTINET TRAINING & CERTIFICATION PROGRAM https://www.fortinet.com/training-certification FORTINET TRAINING INSTITUTE https://training.fortinet.com FORTIGUARD CENTER https://www.fortiguard.com END USER LICENSE AGREEMENT https://www.fortinet.com/doc/legal/EULA.pdf FEEDBACK Email: techdoc@fortinet.com
Sep 26, 2023 FortiAP 7.4.1 Release Notes 20-741-951076-20230926

TABLE OF CONTENTS

Change log

4

Introduction

5

Supported models

5

New features or enhancements

6

Region/country code update and DFS certification

7

Upgrade and downgrade information

8

Upgrading to FortiAP version 7.4.1

8

Downgrading to previous firmware versions

8

Firmware image checksums

8

Supported upgrade paths

8

Product integration support

9

Resolved issues

10

Known issues

11

FortiAP 7.4.1 Release Notes

3

Fortinet Inc.

Change log

Date 2023-09-26

Change description Initial release.

FortiAP 7.4.1 Release Notes

4

Fortinet Inc.

Introduction
Introduction
This document provides release information for FortiAP version 7.4.1, build 0591. For more information about your FortiAP device, see the FortiWiFi and FortiAP Configuration Guide.
Supported models
FortiAP version 7.4.1, build 0591 supports the following models: Wi-Fi 6 Models FAP-231F, FAP-234F, FAP-23JF, FAP-431F, FAP-432F, FAP-432FR, FAP-433F, FAP-831F Wi-Fi 6E Models FAP-231G, FAP-233G, FAP-431G, FAP-433G

FortiAP 7.4.1 Release Notes

5

Fortinet Inc.

New features or enhancements
New features or enhancements

The following table includes FortiAP version 7.4.1 new features and enhancements:

Bug ID 382534 753332 819611 890279 892552 903097
909586 920073
920579

Description
Display the Patch number in firmware version, and report the version information with Patch number to the FortiGate. Note: FortiGates running FortiOS version 7.4.0 and earlier still can show the FortiAP version without the Patch number.
Foreground scanning improvements: The 2.4GHz, 5GHz, and 6GHz channels to be scanned can be pre-configured from the FortiGate. This way, channels are not being scanned all the time.
Support for new model FortiAP-432FR. Note: FortiAP-432FR can be managed by FortiGate running FortiOS 7.0.8, 7.2.1 and later.
Support logging BLE raw data and sending it to the FortiPresence server.
Local-bridging and external-web captive-portal SSID supports dynamic VLAN assignment.
Wi-Fi 6E Models only: Support Trusted Platform Module (TPM). The TPM feature is disabled by default. To enable TPM, enter the following commands in the FortiAP CLI:
cfg -a TPM=1 cfg -c To disable TPM: cfg -a TPM=0 cfg -c
Support Polestar NAO Track integration and asset management. To check the PoleStar RTLS configuration, enter cw_diag -c ble-polestar in the FortiAP CLI.
Site Survey improvements. 1. Configure channel-bonding bandwidth for site survey SSID
New CLI variables are added for 2.4GHz and 5GHz bandwidth respectively: SURVEY_CW_24 = 0(20MHz) | 1(40MHz) SURVEY_CW_50 = 0(20MHz) | 1(40MHz) | 2(80MHz) | 3(160MHz)
2. Support 6 GHz spectrum (Wi-Fi 6E Models only) New CLI variables are added for 6GHz channel, bandwidth, and transmit power: SURVEY_CH_60 = <6GHz channel number> SURVEY_CW_60 = 0(20MHz) | 1(40MHz) | 2(80MHz) | 3(160MHz) SURVEY_TX_POWER_60 = <6GHz transmit power in dBm>
Enhance dynamic VLAN assignment based on the RADIUS attribute Tunnel-PrivateGroup-Id: 1. A pool of VLAN IDs (up to 8) can be configured per VLAN name tag; 2. Assign each client a VLAN ID from the pool by a Round-robin method.

FortiAP 7.4.1 Release Notes

6

Fortinet Inc.

New features or enhancements

Bug ID 921109 931158
940570

Description
Support for MIMO mode configuration.
CAPWAP Auto Health Check feature. FortiAP periodically checks the real-time status of CAPWAP connections to the AP controllers (AC). In the FortiAP CLI, enter cw_diag -c acs-chan-stats to get the current results. For additional diagnosis, use cw_diag debug ping_ac to enable AC IP ping check and set ping interval (disabled by default).
Improve DNS mechanism for AC Discovery. 1. FortiAP retrieves the AC domain suffix from DHCP option 15 (e.g. "example.com"), which
can be configured on a 3rd-party DHCP server; 2. FortiAP has the default AC hostname "fortinet-capwap-controller" and
combines it with the AC domain suffix as one FQDN (e.g. "fortinet-capwapcontroller.example.com") for AC discovery by DNS method; 3. When necessary, the AC hostname can be customized by configuring AC_HOSTNAME_ 1/2/3 without the "." character on the FortiAP.

Region/country code update and DFS certification

Bug ID 601676
911456 913393 919757
924432 924783 926677
936150

Description
Enable 5GHz UNII-1 and UNII-2 channels and adjust transmit power for region code "F" (Indonesia).
Support 6GHz channels for more countries: Malaysia, Singapore, Thailand, Tunisia, and etc.
Enable DFS channels for FAP-432F with region code "K".
Enable DFS channels for FAP-231G/233G with region code "A", "S", "N" (Brazil not included), and "J".
Enable DFS channels for FAP-231G/233G with region code "F".
Enable DFS channels for FAP-231G/233G with region code "K" and "T".
Enable DFS channels for FAP-431G/433G with region code "A", "S", and "N" (Brazil not included).
Support 6GHz channels for more countries: Austria, Bulgaria, Croatia, Greece, Isle of Man, Italy, Latvia, Luxembourg, Mauritius, Monaco, Poland, Romania, Slovakia, Slovenia, and Togo.

FortiAP 7.4.1 Release Notes

7

Fortinet Inc.

Upgrade and downgrade information
Upgrade and downgrade information
Upgrading to FortiAP version 7.4.1
FortiAP 7.4.1 supports upgrading from FortiAP version 7.2.2 and later.
Downgrading to previous firmware versions
FortiAP 7.4.1 supports downgrading to FortiAP version 7.2.2 and later.
Firmware image checksums
To get the MD5 checksum code for a Fortinet firmware image, perform the following steps: 1. Go to the Fortinet Support website. 2. Log in to your account. If you do not have an account, create one and then log in. 3. From the top banner, select Download > Firmware Image Checksums. 4. Enter the image file name, including the extension. For example, FAP_221C-v6-build0030-FORTINET.out. 5. Click Get Checksum Code.
Supported upgrade paths
To view all previous FortiAP versions, build numbers, and their supported upgrade paths, see the Fortinet Documentation website.

FortiAP 7.4.1 Release Notes

8

Fortinet Inc.

Product integration support
Product integration support

The following table lists product integration and support information for FortiAP version 7.4.1:

FortiOS Web browsers

FortiOS 7.4.1 and later. Microsoft Edge version 41 and later. Mozilla Firefox version 59 and later. Google Chrome version 65 and later. Apple Safari version 9.1 and later (for Mac OS X). Other web browsers may work correctly, but Fortinet does not support them.

We recommend that the FortiAP firmware version be matched with the respective FortiOS version, when available. Other variations of FortiOS and FortiAP versions may technically work for the lowest common feature set. However, if problems arise, Fortinet Support will ask that the versions be matched, as recommended, before troubleshooting.

FortiAP 7.4.1 Release Notes

9

Fortinet Inc.

Resolved issues
Resolved issues

The following issues have been resolved in FortiAP version 7.4.1. For inquiries about a particular bug, visit the Fortinet Support website.

Bug ID 784096 890425 912812 914341 928319
929371 938988

Description Fixed a kernel panic issue PC is at _ieee80211_free_node+0x2d0/0x678 [umac]. FortiAP would sometimes not forward packets from wireless clients to the Ethernet side. Fixed a kernel panic issue PC is at bstm_disassociation+0x2c/0x1f0 [umac]. LLDP daemon should be started by factory default. With a single 802.3at (PoE+) power supply, FortiAP-431G/433G should support 2.4GHz, 5GHz, and 6GHz 4x4 MIMO while reducing the transmit power and disabling the USB port. Fixed a kernel panic issue PC is at wlan_wnm_free_tclass+0x54/0xb8 [umac]. Wi-Fi clients could not connect after the FortiAP has been running for 24 hours with dtlspolicy ipsec-vpn.

FortiAP 7.4.1 Release Notes

10

Fortinet Inc.

Known issues
Known issues

The following issues have been identified in FortiAP version 7.4.1. For inquiries about a particular bug or to report a bug, visit the Fortinet Support website.

Bug ID 692160 761298

Description Wireless packets captured by FortiAP radio in Sniffer mode are corrupted. FAP-234F Bluetooth Low Energy (BLE) function cannot work.

FortiAP 7.4.1 Release Notes

11

Fortinet Inc.

www.fortinet.com
Copyright© 2023 Fortinet, Inc. All rights reserved. Fortinet®, FortiGate®, FortiCare® and FortiGuard®, and certain other marks are registered trademarks of Fortinet, Inc., and other Fortinet names herein may also be registered and/or common law trademarks of Fortinet. All other product or company names may be trademarks of their respective owners. Performance and other metrics contained herein were attained in internal lab tests under ideal conditions, and actual performance and other results may vary. Network variables, different network environments and other conditions may affect performance results. Nothing herein represents any binding commitment by Fortinet, and Fortinet disclaims all warranties, whether express or implied, except to the extent Fortinet enters a binding written contract, signed by Fortinet's General Counsel, with a purchaser that expressly warrants that the identified product will perform according to certain expressly-identified performance metrics and, in such event, only the specific performance metrics expressly identified in such binding written contract shall be binding on Fortinet. For absolute clarity, any such warranty will be limited to performance in the same ideal conditions as in Fortinet's internal lab tests. Fortinet disclaims in full any covenants, representations, and guarantees pursuant hereto, whether express or implied. Fortinet reserves the right to change, modify, transfer, or otherwise revise this publication without notice, and the most current version of the publication shall be applicable.


madbuild