DescriptionThere are more packets/sec reported for the Most Active
Source graph compared to what the FortiDDoS is actually
receiving/sending for that source and also compared to other
graphs.ScopeAll FortiDDoS.SolutionFor TCP and DNS traffic, the MAS...
DescriptionThis article explains why FortiDDoS may continue to forward
SYN packets under a SYN flood attack even though the threshold for SYN
packets has been set.ScopeFortiDDoS v4.1 and laterSolutionThe SYN
mitigation happens only when the ALL the f...
DescriptionWhen two units form a cluster, it is not possible to change
or delete the “admin” account. Any attempt to do this will create a
synchronization issue and the HA system.admin checksums will not
match.ScopeFortiOS v4.3 and above.SolutionIt i...
Description This article provides a methodology for replacing a HA slave
unit. Scope FortiOS v4.3 and above. Solution When a slave unit is being
replaced, it is desirable to not trigger a useless failover and also to
ensure that the “unconfigured” ne...
DescriptionThis article explains the information counters related to
session that can be displayed with the command diag sys session stat:#
diag sys session statmisc info: session_count=0 setup_rate=250
exp_count=0 clash=0 memory_tension_drop=0 ephem...