Fortinet Community

cbenejean · 01-29-2018

DescriptionThere are more packets/sec reported for the Most Active Source graph compared to what the FortiDDoS is actually receiving/sending for that source and also compared to other graphs.ScopeAll FortiDDoS.SolutionFor TCP and DNS traffic, the MAS...

cbenejean · 12-18-2017

DescriptionThis article explains why FortiDDoS may continue to forward SYN packets under a SYN flood attack even though the threshold for SYN packets has been set.ScopeFortiDDoS v4.1 and laterSolutionThe SYN mitigation happens only when the ALL the f...

cbenejean · 11-07-2017

DescriptionWhen two units form a cluster, it is not possible to change or delete the “admin” account. Any attempt to do this will create a synchronization issue and the HA system.admin checksums will not match.ScopeFortiOS v4.3 and above.SolutionIt i...

cbenejean · 10-31-2017

Description This article provides a methodology for replacing a HA slave unit. Scope FortiOS v4.3 and above. Solution When a slave unit is being replaced, it is desirable to not trigger a useless failover and also to ensure that the “unconfigured” ne...

cbenejean · 08-01-2017

DescriptionThis article explains the information counters related to session that can be displayed with the command diag sys session stat:# diag sys session statmisc info: session_count=0 setup_rate=250 exp_count=0 clash=0 memory_tension_drop=0 ephem...

Fortinet Community

User Statistics

User Activity

Technical Note: Most Active Source graph

Technical Note: SYN mitigation

Technical Note: HA synchronization and admin account

Technical Tip: Methodology for replacing a HA slave unit

Technical Tip: Session counter information

Fortinet Training Institute