FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
wcruvinel
Staff
Staff
Article Id 408800
Description

This article describes an issue where the WAD process may crash with a segmentation fault (signal 11) related to the function 'wad_find_fwdsvr_by_key' after upgrading to FortiOS 7.4.8.

Scope FortiGate, FortiOS 7.4.8.
Solution

Symptoms: After upgrading to FortiOS 7.4.8, the WAD process crashes with signal 11 (segmentation fault).

Repeated crashes consume resources and result in high CPU utilization. The issue us triggered by a server-related configuration in the web proxy.

 

Resolution: The issue has been addressed and the fix is included in FortiOS 7.4.9.

 

Workaround: Downgrade to FortiOS 7.4.7, or keep running the FortiOS 7.4.8 removing forward-server related configuration in the web proxy if it is not required.

 

Caution: If remaining on FortiOS 7.4.8 and removing the web proxy configuration, back up the FortiGate configuration before making any changes. Carefully review the impact on policies and services that rely on the web proxy.

 

To remove the forward-server configuration in the web proxy, apply the following commands on the FortiGate:

 

config web-proxy forward-server
    purge
config web-proxy forward-server-group
    purge
config web-proxy url-match
    purge


Configure timeout web-proxy as default:

 

config web-proxy global
    set forward-server-affinity-timeout 30
end