interface-stat-change

[mdepedro]

All, I just upgraded the firmware on our FGT-300A to mr6-b0673 from 405 and have noticed a very annoying thing with the above subject. I get interface-stat-change almost every hour and it knocks out internet access for almost 20 seconds which causes no end of trouble. I have a music stream running that I use to background listen that internet access is OK. Plus we have users who work on websites that require input and that input has to be submitted but when this interface change happens the info is lost and they have to input it again which usually means that they have to restart the session all over again. I have looked in the admin manual and checked the knowledge base but see nothing about this. Any ideas how to stop this or what might be causing this problem. This interface is the link to the Comcast cable modem that was just recently replaced by an SMC08014 unit from a older Cisco unit and at first it looked like it was happening when the av updates came in but I changed that from every hour to every three hours but the interface-stat-change keeps happening.

[rwpatterson]

I have had weird issues the two times I upgraded to P4 from P3, and have always backed it out. Usually HTTPS errors, and inability to get to sites... I hear you about the noise that gets generated when the Internet drops...

[mdepedro]

Upgraded to MR7 patch2 b0733 and so far I have not had the link-stat-change happen. So it looks like this fixed the problem. Will see how it does when under a load during the work day.

[rwpatterson]

I bumped my 1000A last night as well. I' m keeping my fingers crossed too...

[mdepedro]

Had one link-stat-change happen so now we have our internet plugged into a different port on the Comcast router. Still can' t figure out if it is the Fortigate or Comcast dropping the link.

[rwpatterson]

Have you tried debugging on the interface level? Look for errors on the card? From the CLI: diagnose hardware deviceinfo nic [ WANx | internal | DMZ | etc ] Good luck

[mdepedro]

Just did. It show 175 TX errors and 175 TX Carrier errors otherwise all other error counts are zero. We are starting to think this is a load issue with the new SMC router from Comcast. We run a half day on Fridays and since 12pm we have not had a problem and also after 6 PM last night, when almost all employees leave for the day, we also had no problems. So it looks like when we load down the internet link we have the problem. Now to get Comacst to admit a problem and fix it!