Troubleshooting Tip: Threat Feed in FortiGate GUI shows 67,108,864 Accepted Entries (known issue)
| Description | This article describes a known issue where an external Threat Feed on the FortiGate GUI shows an abnormally large number of Accepted Entries. |
| Scope | FortiGate, FortiProxy. |
| Solution | When checking under Security Fabric -> External Connectors in the FortiGate GUI, administrators may intermittently find that configured Threat Feeds are showing a value of 67,108,864 in the Accepted Entries section:
It is also possible to see the same issue in the CLI by running the command diagnose sys external-resource stats, though the issue presents symptoms differently from the GUI:
FortiGate (global) # diagnose sys external-resource stats
This is a Known Issue (tracked by Issue ID 1185498/1196694) that will be resolved as of FortiOS 7.4.10, 7.6.5, and later, as well as FortiProxy 7.4.12 and 7.6.5, and it appears to be intermittently triggered whenever the Threat Feed configuration is modified (a .count file is not generated correctly in these instances, resulting in an invalid Accepted entry count). Take note that this issue does not impact the actual functionality of the Threat Feed and is only a visual anomaly.
Related Documents: Troubleshooting Tip: External connector threat feed status is in the 'Unavailable' connection status Technical Tip: External threat list (threat feed) is not working (connector is showing down) Technical Tip: Types of External Threat Feed and their locations in the GUI |

