Skip to main content
Pyrate31
New Member
February 24, 2016
Question

Forticlient casuing an igmpv2 storm on my student vlan

  • February 24, 2016
  • 2 replies
  • 7174 views

I recently have uninstalled forticlient from an imaged machine, in an unrelated matter, and in putting the client back on the machine, I simply used the offline installer.  after registering and firing this up, I notice aan IGMPv2 storm across my student vlan where the machine is connected to.  when I turn forticlient off or disconnect the laptop I have just connected this stops.  I'm wondering if anyone can shed some light on this?

 

thanks

 

    2 replies

    emnoc
    New Member
    February 24, 2016

    What group was it being sent at and are you 100% sure it's the client? Don't know how vpnclient would use igmp much less send to a igmp group.

     

    Was the host inspected?

     

     

    Pyrate31
    Pyrate31Author
    New Member
    February 24, 2016

    when I connect the forticlient the storm starts....when I disconnect or unregister the client it stops...im seeing it via wireshark, so that would tell me that it would have something to do with forticlient.  just an educated guess....

    Chris_Lin_FTNT
    Staff
    Staff
    February 24, 2016

    It may be helpful to try https://www.dropbox.com/sh/cb0j4pxw1f8nq84/AABHzZW1bpx1VjzYAmiK00S9a?dl=0

     

    If it works, then the cause was application firewall.

    mstenner
    New Member
    March 17, 2016

    Hi - what version of the client were you using? We've seen a similar issue (on a corporate network) with version 5.2.5.0658.

     

    This forum entry https://forum.fortinet.com/tm.aspx?m=131412 appears to indicate this is an issue with the application firewall element of the client.