Description
This article describes how to eliminate the 'Check the dropped out-of-state TCP packets are logged' error in the FortiGate compliance check.
Scope
FortiGate.
Solution
When a compliance check has been completed under System -> advanced -> Compliance, it is normal to see an error message stating 'Check the dropped out-of-state TCP packets are logged' in the compliance logs.
Enable the out-of-state TCP packets with the following command:
config log setting
set log-invalid-packet enable
end
In FortiOS v7.4.X and above, the command shown above has been replaced with the following:
config log setting
set extended-log enable
end
After enabling this setting, the following information will be displayed:
