Technical Tip: Incorrect file name is displayed under file filter logs of FortiGate

When sending file attachments to the Naver email server, filenames may be incorrectly displayed as 'uploadByXHR' under the FortiGate File Filter logs. In contrast, when using Gmail, the correct filename is preserved and appears as expected in the logs. For example, 'fortigate-200f-series.pdf'

Fixed in IPSengine versions IPSE 7.4.9:0574, IPSE 7.6.3:1147, and IPSE 8.0.0:0003.
If the device is using a later version of IPSengine than version 0574 in version 7.4, version 1147 in version 7.6, or version 0003 in version 8.0, this issue has been resolved.
The version can be checked as follows:

diagnose autoupdate versions | grep "IPS Attack" -A 5
IPS Attack Engine
---------
Version: 7.01168 signed  <---
Contract Expiry Date: Fri Dec 25 2026
Last Updated using scheduled update on Tue Dec 23 11:18:02 2025
Last Update Attempt: Tue Jan 6 13:36:58 2026

General debug information required by FortiGate TAC for investigation: 

1. TAC Report: execute tac report.
2. Configuration file of the FortiGate.
3. Capture IPS diagnostics for the Destination IP/Mail Server and send emails with attachments.

diagnose ips filter set "host <Enter the IP/Subnet>"

diagnose ips debug enable all
diagnose debug enable

4. Download File Filter logs from FortiGate GUI.