Technical Tip: Session counter information

cbenejean · 01-29-2018

DescriptionThere are more packets/sec reported for the Most Active Source graph compared to what the FortiDDoS is actually receiving/sending for that source and also compared to other graphs.ScopeAll FortiDDoS.SolutionFor TCP and DNS traffic, the MAS...

cbenejean · 12-18-2017

DescriptionThis article explains why FortiDDoS may continue to forward SYN packets under a SYN flood attack even though the threshold for SYN packets has been set.ScopeFortiDDoS v4.1 and laterSolutionThe SYN mitigation happens only when the ALL the f...

cbenejean · 11-07-2017

DescriptionWhen two units form a cluster, it is not possible to change or delete the “admin” account. Any attempt to do this will create a synchronization issue and the HA system.admin checksums will not match.ScopeFortiOS v4.3 and above.SolutionIt i...

cbenejean · 08-01-2017

DescriptionThis article explains the information counters related to session that can be displayed with the command diag sys session stat:# diag sys session statmisc info: session_count=0 setup_rate=250 exp_count=0 clash=0 memory_tension_drop=0 ephem...

cbenejean · 05-30-2017

DescriptionAfter upgrading to 4.2.2 an increase may be seen of the packet drops with L3/L4 anomalies into the different SPP except SPP-0.ScopeStarting from FortiDDoS v4.2.2SolutionBy design, from release 4.0.0, the following anomalies were reported i...

User Statistics

User Activity

Technical Note: Most Active Source graph

Technical Note: SYN mitigation

Technical Note: HA synchronization and admin account

Technical Tip: Session counter information

Technical Note: Changes to anomalies reported in SPP-0

Technical Tip: Session counter information

Fortinet Training Institute

KCS