somebody please xplain this to me

[dirkdigs]

in my reports. i have 2 areas that dont add up. Bandwidth and Applications > Top Users by Bandwidth

[dirkdigs]

and Web Usage > Top Websites by Bandwidth

[dirkdigs]

there is no way in 1 week time that we have sent 800 GB to this top website. we only have a 5 down and 1 up DSL connection.

[Warren_Olson_FTNT]

This looks like time for a support ticket.

[neonbit]

+1 for support ticket. Also I' m reading the reports a little differently. From what I can see you' ve downloaded 800GB from the first server, not uploaded. Still 800GB+ download on a 5Mbps connection over one week is a little fishy. Are you sure that a) you' re report is configured for one week and only contains data from the one firewall and b) you don' t have a 100Mb fibre link connected that you' ve forgotten about? ;)

[FatalHalt]

Agreeing with Warren and neonbit, assuming the report is otherwise configured correctly, I would assume something' s up. I mean, even if you were able to fully saturate your line 24/7, that' s still like 1/3 of your available bandwidth for the week, lofty goal. Only other option I can figure out would be that this DNS name is actually internal somehow, and not actually crossing your DSL line.

[Nihas]

It might be a bug , I have the same in my new 5.2 . IPsec Traffics are showing as TB' s.... I have done #execute report recreate-db #execute report-config reset after the upgrade. But no luck. Any help before a TAC ticket??

[Nihas]

Any suggestion would be highly appreciated.

[Istvan_Takacs_FTNT]

I agree with Nihas, it appears to be a corrupted database. Not on FGT, but on FAZ something similar happened to us in the past and the solution was to rebuild the local DB. What version is your FGT? There might be a something similar going on as the FortiOS is the same across most of the products.

[netmin]

Same applies to our FGTs running 5.2. Additionally, the local report is randomly mixing local hostnames and ip-addresses. Recorded logs (scheduled upload to FAZ 5.0.7) appear to be correct.