FGT kills PDF files

[#1]

Hi Our Fortigate 200 OS2.8 MR3 kills PDF files. I have no idea why. We have configured 10 MB for scans in Memory and 50 MB for buffering to disk. The size of the PDF files = 600k - 2MB ??? jago

[UkWizard]

what do you mean it ' kills' them ? does it block them, corrupt them ? what ? Check you havent blocked .pdf extensions in the file blocking.

[#3]

the files will be corrupted we don´t block pdf files

[UkWizard]

Did you format the hard disk when you upgraded ? Is there is a link you can give us to a public PDF file that you have the problem with, i can try it on my unit here and see what happens..

[#5]

yes, i have updatet the FGT over TFTP and formated the logdisk yesterday I have done it, too. Exemple: corrupted file: http://213.20.86.132/html/FortinetBroch1.pdf the last part of the file is missing orginal file: http://www.fortinet.com/doc/FortinetBroch.pdf

[#6]

I had similar problem with the pdf files and some doc files in emails. The problem was in 2.8MR3 when I activated the add signatures in email in the protection profiles. Marco A. Barrios Infraestructure Senior FCSE - MCP

[Wayne11]

We have the same problem with FG 200 2.8 build 219. All pdf files goes corrupt if we sent them out through smtp and the Protection Profile is set to scan these files. If I disable the Protection Profile everything works.

[Sylvia]

We have this problem, too. Have you upgraded to MR5? Did this resolve the problem? Thanks, Sylvia.

[#9]

We are using FG500 2.80 MR5 and are experiencing loss of PDF files downloaded via HTTP also. With the antivirus protection policy in place the downloads are EXTREMELY slow, the client does not see anything in their browser for up to 5 minutes. Then if they are lucky the PDF will show up (PDF < 1MB!) If I bypass the antivirus scan for the site containing the PDF file it downloads INSTANTLY over our connection. Re-enabling the antivirus brings back the bad behaviour. I cannot keep bypassing av for all sites that have PDF files on them. This is not a good solution.

[#10]

Hmm... Having seen many instalations, I have never had such problem (from 50 to 1000). At least with 2.5 Mr10 and 2.8 mr5. On the other hand I only look the 1st MB and then release it. (AV config HTTP 1mb) Could it be the proxy in the midle?