On 6.4 train Packet Capture was amazingly useful, it was possible to set it up and leave it running as long as needed on particular virtual, physical or VPN interface.
Non (ver 7.2.3) it is TOTALY USELESS - you can only run one at the time and as long as session is active
PLEASE DO NOT FIX what is not broken!!! - and give us great troubleshooting tool back as soon as possible!!! - I beg you!
Hi all,
We've heard the feedback and will work on adding it back. This will come in a couple phases:
Thanks
Often times we are troubleshooting for users in another timezone and hence need to leave the packet capture running. There are a ton of other use-cases where leaving the capture running is necessary. Unfortunately this is not possible in the newer firmware version, as the packet capture is restricted to a particular admin session which to me sounds dumb, whereas previously it ran on a device-level. Would love for Fortinet to return to the previous approach.
I totally agree. Am baffled by why the new approach even made them sense.
Those are great feedback and understandably, the functionality lost sounds like a bit of regression.
Similar concerns have been raised internally by QA so the good news is the feature is under review for improvements!
Please also see the new feature doc on running simultaneous packet captures in 7.4.0:
