FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
kjiye
Staff & Editor
Staff & Editor
Article Id 394804
Description This article outlines an issue where the FortiGate reports an incorrect file name under the File Filter logs. 
Scope FortiGate
Solution

When sending file attachments to the Naver email server, filenames may be incorrectly displayed as 'uploadByXHR' under the FortiGate File Filter logs. In contrast, when using Gmail, the correct filename is preserved and appears as expected in the logs. For example, 'fortigate-200f-series.pdf'

 

file-filter-log.jpg

An official release of the firmware or IPS engine containing the fix is in preparation. In the meantime, contact Fortinet TAC to obtain and install a temporary IPS engine that resolves the issue.

General debug information required by FortiGate TAC for investigation: 

  1. TAC Report: execute tac report
  2. Configuration file of the FortiGate.
  3. Capture IPS diagnostics for the Destination IP/Mail Server and send emails with attachment.
    # diagnose ips filter set "host <Enter the IP/Subnet>"

    # diagnose ips debug enable all
    # diagnose debug enable

  4. Download File Filter logs from FortiGate GUI.