Re: FortiOS - End of Life Overview

lol · 11-13-2024

Description This article provides CLI commands for a methodical initial debugging of a memory-related issue on FortiGate. Scope FortiGate. Solution FortiGate memory troubleshooting can be difficult. This article provides a simplified and structured m...

lol · 10-10-2024

Description This article describes an issue where web filter or any other security profile is not applied to TLS traffic for proxy-based policies Scope FortiGate. Solution The solution is to revert the profile protocol options to the default and avoi...

lol · 12-14-2023

Description This article describes the hidden command 'diagnose firewall iprope flush' and how to re-populate the policy ruleset in case the command was accidentally executed and all firewall rules were deleted. This is important information that sho...

lol · 04-26-2023

Description This article describes how to detect and resolve a WAD memory leak that occurs with 'user-info' type processes. Scope FortiOS v7.0.8, v7.0.9. Solution The WAD process suffers a memory leak on v7.0.8 and v7.0.9 in WAD processes with the 'u...

lol · 04-26-2023

Description This article describes how to detect and resolve a wad memory leak in object ssl.fts.str.fstr_buffer_bytes. Scope FortiOS v7.0.8, v7.0.9. Solution The wad process has a memory leak on FortiOS 7.0.8 and 7.0.9 in the object ssl.fts.str.fstr...

lol · 09-19-2024

Hello, > A filter driver that has a low numerical altitude is loaded into the I/O stack below a filter driver that has a higher numerical value.source: https://learn.microsoft.com/en-us/windows-hardware/drivers/ifs/load-order-groups-and-altitudes-for...

lol · 06-13-2024

Hello, The official EOL list for all hardware and software releases can be found in the support portal after logging in. https://support.fortinet.com/Information/ProductLifeCycle.aspx Regards

lol · 12-14-2023

Hello, It should be mentioned that the "diagnose firewall iprope flush" command is a hidden command for reasons. It will wipe _all_ policies from the fortigate and leave the iprope table empty. The FortigGate will not have any rules anymore, neither ...

lol · 04-25-2023

Hello, > The logs tells the block is because the webfilter is categorizing whatsapp web as Social Networking. The FortiGuard Web Filter Lookup categorizes it as Web Chat Per log file the interesting parts aredstip=157.240.222.60 ratemethod=iphostname...

lol · 04-25-2023

Hello, > 1. is it possible to use IPS with certificate inspection (and not deep inspection) Yes. > and if so what im I losing using just cert inspection. As mentioned by aahmadzada the FortiGate might not be able to scan all content if it is TLS encr...

User Statistics

User Activity

Troubleshooting Tip: initial commands to collect for memory debugging

Troubleshooting Tip: Security Profiles bypassed and not TLS inspected in proxy based policies due to incorrect profile-protocol-options settings

Technical Tip: Hidden command 'diagnose firewall iprope flush' and how to re-populate an empty FortiGate policy ruleset

Troubleshooting Tip: WAD memory leak due to WAD process type user-info on firmware v7.0.8 and v7.0.9

Troubleshooting Tip: WAD memory leak in object ssl.fts.str.fstr_buffer_bytes on firmware v7.0.8 and v7.0.9

Re: Possible problem with drivers