DescriptionThere are more packets/sec reported for the Most Active
Source graph compared to what the FortiDDoS is actually
receiving/sending for that source and also compared to other
graphs.ScopeAll FortiDDoS.SolutionFor TCP and DNS traffic, the MAS...
DescriptionThis article explains why FortiDDoS may continue to forward
SYN packets under a SYN flood attack even though the threshold for SYN
packets has been set.ScopeFortiDDoS v4.1 and laterSolutionThe SYN
mitigation happens only when the ALL the f...
DescriptionWhen two units form a cluster, it is not possible to change
or delete the “admin” account. Any attempt to do this will create a
synchronization issue and the HA system.admin checksums will not
match.ScopeFortiOS v4.3 and above.SolutionIt i...
DescriptionThis article explains the information counters related to
session that can be displayed with the command diag sys session stat:#
diag sys session statmisc info: session_count=0 setup_rate=250
exp_count=0 clash=0 memory_tension_drop=0 ephem...
DescriptionAfter upgrading to 4.2.2 an increase may be seen of the
packet drops with L3/L4 anomalies into the different SPP except
SPP-0.ScopeStarting from FortiDDoS v4.2.2SolutionBy design, from release
4.0.0, the following anomalies were reported i...