Re: FortiOS - End of Life Overview

lol · 10-10-2024

Description This article describes an issue where web filter or any other security profile is not applied to TLS traffic for proxy-based policies Scope FortiGate. Solution The solution is to revert the profile protocol options to the default and avoi...

lol · 12-14-2023

Description This article describes the hidden command 'diagnose firewall iprope flush' and how to re-populate the policy ruleset in case the command was accidentally executed and all firewall rules were deleted. This is important information that sho...

lol · 04-26-2023

Description This article describes how to detect and resolve a WAD memory leak that occurs with 'user-info' type processes. Scope FortiOS 7.0.8, 7.0.9. Solution The WAD process suffers a memory leak on FortiOS 7.0.8 and 7.0.9 in WAD processes with th...

lol · 04-26-2023

Description This article describes how to detect and resolve a wad memory leak in object ssl.fts.str.fstr_buffer_bytes. Scope FortiOS 7.0.8, 7.0.9. Solution The wad process has a memory leak on FortiOS 7.0.8 and 7.0.9 in the object ssl.fts.str.fstr_b...

lol · 05-10-2022

Description This article describes that since FortiProxy version 7.0, the FQDNs configured in the GUI tab 'URL match' or in the CLI option '# config web-proxy url-match' will match top-down. This means that the order in which the FDQNs are added will...

lol · 09-19-2024

Hello, > A filter driver that has a low numerical altitude is loaded into the I/O stack below a filter driver that has a higher numerical value.source: https://learn.microsoft.com/en-us/windows-hardware/drivers/ifs/load-order-groups-and-altitudes-for...

lol · 06-13-2024

Hello, The official EOL list for all hardware and software releases can be found in the support portal after logging in. https://support.fortinet.com/Information/ProductLifeCycle.aspx Regards

lol · 12-14-2023

Hello, It should be mentioned that the "diagnose firewall iprope flush" command is a hidden command for reasons. It will wipe _all_ policies from the fortigate and leave the iprope table empty. The FortigGate will not have any rules anymore, neither ...

lol · 04-25-2023

Hello, > The logs tells the block is because the webfilter is categorizing whatsapp web as Social Networking. The FortiGuard Web Filter Lookup categorizes it as Web Chat Per log file the interesting parts aredstip=157.240.222.60 ratemethod=iphostname...

lol · 04-25-2023

Hello, > 1. is it possible to use IPS with certificate inspection (and not deep inspection) Yes. > and if so what im I losing using just cert inspection. As mentioned by aahmadzada the FortiGate might not be able to scan all content if it is TLS encr...

User Statistics

User Activity

Troubleshooting Tip: Security Profiles bypassed and not TLS inspected in proxy based policies due to incorrect profile-protocol-options settings

Technical Tip: Hidden command 'diagnose firewall iprope flush' and how to re-populate an empty FortiGate policy ruleset

Troubleshooting Tip: WAD memory leak due to WAD process type user-info on firmware 7.0.8 and 7.0.9

Troubleshooting Tip: Wad memory leak in object ssl.fts.str.fstr_buffer_bytes on firmware 7.0.8 and 7.0.9

Technical Tip: FortiProxy 7.0 GUI tab 'URL match' will match the FQDNs top-down

Re: Possible problem with drivers

Re: FortiOS - End of Life Overview

Re: Fortigate SSLVPN client/server will not pass traffic unless "diag firewall iprope flush&quo

Re: Wrong categorization

Re: Fortigate IPS

Re: FortiOS - End of Life Overview

Re: Wrong categorization

Re: Fortigate SSL Offloading with SNI

Re: Fortigate IPS

Re: Donwload Product's VMs

Re: Wrong categorization

Re: Donwload Product's VMs

Re: Fortigate SSL Offloading with SNI

Re: Fortinet UTM logs field country

Re: Distributing updates via one device / report a...

KCS

Fortinet Training Institute