Technical Tip: Session counter information

cbenejean · 01-29-2018

Description This article describes why there are more packets/sec reported for the Most Active Source graph (see Most Active Source graph - FortiDDOS Handbook) compared to what the FortiDDoS is actually receiving/sending for that source and also comp...

cbenejean · 12-18-2017

Description This article explains why FortiDDoS may continue to forward SYN packets under a SYN flood attack even though the threshold for SYN packets has been set. Scope All FortiDDoS B/E/F Models. Solution The SYN mitigation happens only when the f...

cbenejean · 11-07-2017

DescriptionWhen two units form a cluster, it is not possible to change or delete the “admin” account. Any attempt to do this will create a synchronization issue and the HA system.admin checksums will not match.ScopeFortiOS v4.3 and above.SolutionIt i...

cbenejean · 08-01-2017

DescriptionThis article explains the information counters related to session that can be displayed with the command diag sys session stat:# diag sys session statmisc info: session_count=0 setup_rate=250 exp_count=0 clash=0 memory_tension_drop=0 ephem...

cbenejean · 05-30-2017

DescriptionAfter upgrading to 4.2.2 an increase may be seen of the packet drops with L3/L4 anomalies into the different SPP except SPP-0.ScopeStarting from FortiDDoS v4.2.2SolutionBy design, from release 4.0.0, the following anomalies were reported i...

User Statistics

User Activity

Technical Tip: Most active source graph

Technical Tip: SYN mitigation

Technical Note: HA synchronization and admin account