FortiCloud showing wrong traffic log

[icdata]

Hi,

since I upgraded my Fortigate 50E to 6.0 the Forticloud Reports are showing heavy traffic usage, around 1-2 TB per day (normal traffic is 30 GB/day). After checking the traffic it is clear, that there is a clear error in the log and this must be a bug in 6.0. That's all I can say for now...

If you tell me if there is any other method to see historical traffic in the Admin panel (found nothing except live monitoring), I could check if this is a FortiGate or a FortiCloud issue...

[dstaylor]

I was just scanning through the forum to see if anyone else is having this issue.  My 60E shows unrealistically high traffic numbers since upgrading to 6.0 and then 6.0.1.  

[rg2017]

We've noticed that since upgrading to 6.0.1 that there has been excessive DNS traffic logged (in the gigabytes) to/from google's public DNS servers. I have a ticket open with support. 

[andrewbailey]

Hello,

I have the same issue- from what I can see it is a Fortigate issue. Both FortiCloud and FortiAnalzyer are simply reporting the "incorrect" data they receive from the Fortigate(s). I only noticed the issue in 6.0.1. I hadn't seen it in 6.0.

Here's a link to my Forum post:-

https://forum.fortinet.com/FindPost/162850

and to another gent reporting the same issue in the same thread:-

https://forum.fortinet.com/FindPost/162870

I have a ticket open as well- 2769303 is the case number if anyone wants to reference it in their own cases.

I've had a ticket open since 15th of June- so far just the usual Level 1 nonsense (have you tried this, have you done that etc). Nothing useful has happened with it month on.

Hope that helps someone.

Kind Regards,

Andy.