SSL alert sent

Forum|Forum|5 years ago
June 8, 2021
2 replies
5225 views

Hello, after I upgraded my FortiOS version to 6.0.12 I receive these alerts in eventlogging

Message meets Alert condition date=2021-06-07 time=17:49:59 devname=rinxcomfw1 devid=FGT60XXXXXX logid="0105048039" type="event" subtype="wad" level="error" vd="root" eventtime=1623080999 logdesc="SSL fatal alert sent" session_id=242277 policyid=1 srcip=X.X.X.X srcport=X dstip=X.X.X.X dstport=443 action="send" alert="2" desc="illegal parameter" msg="SSL Alert sent" Message meets Alert condition date=2021-06-07 time=17:49:59 devname=rinxcomfw1 devid=FGT60DXXXXXX logid="0105048003" type="event" subtype="wad" level="error" vd="root" eventtime=1623080999 logdesc="SSL handshake length invalid" session_id=242277 policyid=1 srcip=X.X.X.X srcport=X dstip=X.X.X.X dstport=443 action="close" handshake="ClientHello" msg="Bad length in SSL hands

The policy ID 1 is the internet access & I use cetificate inspection.

Anyone seeing the same thing or knowns what kind of traffic is causing these alerts?