Freegate.Searching - WTF Fortinet?

[rwpatterson]

I just started receiving hundreds of calls re: cannot surf the Internet, needed applications hanging, etc. After jumping through hoops, dodging bullets for the past couple hours, it seems the latest signature update introduced a false positive on ' Freegate' Searching' , and it' s blocking a bunch of stuff. Google, Yahoo, banking sites... You name it. Once I set that to Monitor instead of block, everything works. BE AWARE.

[Taylor_Shain]

Same symptoms here. First occurrence of ' Freegate.Searching' application control appeared at 13:10, which coincides with the following update at 13:09: Fortigate push update virdb(21.00305) etdb(21.00305) idsdb(4.00424)idsetdb(0.00000) from 61.204.170.252:443

[netmin]

We have seen it (only) on translate.google.xyz until now ...

[Taylor_Shain]

Also, this only appeared to effect users with Internet Explorer 8. Chrome and IE 10 were never flagged with this application control.

[rwpatterson]

Nor Firefox.

[Dale_Hassebrock]

Just fixed mine. What a life saver this tip turned out to be. Thanks much

[rwpatterson]

That' s the point. :)

[simonorch]

Thanks for the heads up

[Jordan_Thompson_FTNT]

This issue was resolved in IPS signature package 4.425.

[rwpatterson]

Have 4.426. Confirmed. Thanks for the heads up.