Technical Tip: Session counter information

cbenejean · 01-29-2018

Description This article describes why there are more packets/sec reported for the Most Active Source graph (see Most Active Source graph - FortiDDOS Handbook) compared to what the FortiDDoS is actually receiving/sending for that source and also comp...

cbenejean · 12-18-2017

Description This article explains why FortiDDoS may continue to forward SYN packets under a SYN flood attack even though the threshold for SYN packets has been set. Scope All FortiDDoS B/E/F Models. Solution The SYN mitigation happens only when the f...

cbenejean · 11-07-2017

DescriptionWhen two units form a cluster, it is not possible to change or delete the “admin” account. Any attempt to do this will create a synchronization issue and the HA system.admin checksums will not match.ScopeFortiOS v4.3 and above.SolutionIt i...

cbenejean · 08-01-2017

DescriptionThis article explains the information counters related to session that can be displayed with the command diag sys session stat:# diag sys session statmisc info: session_count=0 setup_rate=250 exp_count=0 clash=0 memory_tension_drop=0 ephem...

cbenejean · 04-05-2017

DescriptionOn some occasions the legend of a graph may be noticed to have been replaced by v0 or v1.ScopeAll FortiDDoS firmware from v4.1.0.SolutionThis may occur if the format log disk has not been completed or if something changes in the log disk.A...

User Statistics

User Activity

Technical Tip: Most active source graph

Technical Tip: SYN mitigation

Technical Note: HA synchronization and admin account