Skip to main content
darisandy
Staff
Staff
February 10, 2025

Troubleshooting Tip: Firewall Policy 0 Bytes Count after Upgrade on FortiGate-7000F Series

  • February 10, 2025
  • 0 replies
  • 1012 views
Description This article describes how to troubleshoot if the firewall policy is not showing byte counts after the FortiOS upgrade.
Scope FortiGate-7000F Series v7.4.5.
Solution

After an upgrade to v7.4.5, the firewall policy shows 0-byte counts on the column even though traffic is passing normally.

 

The default option for CSF seems to change after the upgrade:

 

get sys csf 

status : enable
upstream :
source-ip : 0.0.0.0
upstream-interface-select-method: auto
upstream-port : 8013
group-name : SLBC
group-password : *
accept-auth-by-cert : enable
log-unification : disable
authorization-request-type: serial
fabric-workers : 2
downstream-access : disable
legacy-authentication: disable <-----
configuration-sync : local
fabric-object-unification: default
trusted-list:
forticloud-account-enforcement: enable
file-mgmt : enable
file-quota : 268435456
file-quota-warning : 90

 

Change the option to enable. The FortiGate will be able to consolidate the traffic volume from all the modules.

 

config system csf
    set legacy-authentication enable
end

 

After the change, the firewall policy should be able to show the byte count.

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!