BugZero | Fortinet BugID 869978 - CAPWAP tunnel traffic over tunnel SSID is dropped ...

Fortinet - Defect ID: 869978

CAPWAP tunnel traffic over tunnel SSID is dropped when offloading is enabled

Fortinet - Defect ID: 869978

CAPWAP tunnel traffic over tunnel SSID is dropped when offloading is enabled

Last updated on January 29th, 2026

BugZero Risk Score
6.3 Medium

Overall: 6.3

Lifecycle: 7.3

Community: 7.3

What is the BugZero Risk Score?

Fortinet Integration

Learn more about where this data comes from

Fortinet Integration

Learn more

BugZero Plan

Streamline upgrades with automated vendor bug scrubs

BugZero Plan

Learn more

BugZero Prevent

Wish you caught this bug sooner? Get proactive today.

BugZero Prevent

Learn more

Bug Details

Priority: Unspecified
Status: Open
Impacted Service: Existing Known IssuesWifi Controller

Description

On the FortiGate 200F, CAPWAP tunnel traffic over tunnel SSID is dropped when offloading is enabled. In HA cluster of FGT-200F units with 'capwap-offload' enabled, traffic from tunnel SSID cannot pass after HA failover is triggered.

Change history

2026-01-29 Added: 7.2.12, 7.2.13

2026-01-29 Removed: 7.4.0

2022-11-10 Added: 7.2.12, 7.2.13

2022-11-10 Removed: 7.4.0

2022-11-10 Added: 7.2.12, 7.2.13

2022-11-10 Removed: 7.4.0

2022-11-10 Added: 7.2.12

2022-11-10 Removed: 7.4.0

2022-11-10 Added: 7.2.12

2022-11-10 Added: 7.2.10, 7.2.11, 7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.4.0, 7.4.1, 7.4.2

2022-11-10 Added: 7.2.12, 7.2.13

2022-11-10 Removed: 7.2.11, 7.4.0

2022-11-10 Added: 7.2.12, 7.2.13

2022-11-10 Removed: 7.4.0

Links

Relevant Products

Click on a version to see all relevant bugs

Affected versions:7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.2.10, 7.2.11, 7.2.12, 7.2.13, 7.4.1, 7.4.2

Fixed versions: No known fixed versions

Relevant Products

Click on a version to see all relevant bugs

Affected versions:7.2.3, 7.2.4, 7.2.5, 7.2.6, 7.2.7, 7.2.8, 7.2.9, 7.2.10, 7.2.11, 7.2.12, 7.2.13, 7.4.1, 7.4.2

Fixed versions: No known fixed versions

Top Fortinet Defects

8.6Defect ID: 1240901
PCI scan fails when using HTTP/1.0 on the SSLVPN port
8.6Defect ID: 1252663
On FortiGate D-series devices running older BIOS versions, the serial number changes to FGT0000000000001 after upgrading to FortiOS 7.4.10, 7.4.11, 7.6.5, and 7.6.6
8.5Defect ID: 1213247
504 Gateway Timeout shown when a virtual-server configured in full mode connects to a HTTPS server that only supports TLS <= 1.2 and which also only supports using SHA1 for signatures
8.4Defect ID: 1260236
Unexpected power off events occur in FortiGate 70G when configured in HA Active/Passive mode with wireless traffic
8.4Defect ID: 1259458
Intermittent reboot of FortiGate-71G caused by an error condition in the IPS engine

Ready to prevent the next vendor outage?

Get a demo

Fortinet - Defect ID: 869978

CAPWAP tunnel traffic over tunnel SSID is dropped when offloading is enabled

Fortinet - Defect ID: 869978

CAPWAP tunnel traffic over tunnel SSID is dropped when offloading is enabled

Last updated on January 29th, 2026

BugZero Risk Score6.3 Medium

Bug Details

Links

Top Fortinet Defects

Ready to prevent the next vendor outage?

BugZero Risk Score
6.3 Medium