Why is DNS traffic being passed even though it is not explicitly
permitted? Such things cause me concern. Is it the DNS helper? Version:
FortiGate-500E v6.0.5,build0268,190507 (GA) flow trace:id=20085
trace_id=2449 func=print_pkt_detail line=5494 msg...
After much searching I could not find any documentation on what the
minimal access is required to perform backups. So I experimented and
came up with this. Hopefully the next person will not have to search so
long.(BTW, support web chat was not helpf...
a bit more info... so it appears to be the "implicit-allow-dns". I
believe that may be set when choosing NGFW Policy-mode. The problem is
that "implicit" rule does not use the central SNAT policy, and does an
interface SNAT regardless. bug?
https://h...
In working with fortigate support yesterday we determined that the
problem exists when BOTH AV and FortiGuard Web Filtering are enabled.
They were going to take that info and try to reproduce in their lab.
Ticket# 337802
Sadi: I have the same issue and I have a customer that has the issue
also. At this point I' m convinced it is a bug in MR1. I will be working
with TAC tonight to reproduce the issue and concur with my conclusion. I
can bypass the issue by turning on ...
