Lucene search

K
fortinetFortiGuard LabsFG-IR-16-088
HistoryNov 22, 2016 - 12:00 a.m.

FortiOS flow-mode detection bypass under certain conditions

2016-11-2200:00:00
FortiGuard Labs
www.fortiguard.com
14

EPSS

0.001

Percentile

47.8%

A FortiGate configured to use flow-based protection will stop monitoring network sessions that are active when a scanning engine is reloaded after an update (nearly instantaneous process).
This tends to impact long lived network sessions, with chances to be alive during and after an update, such as SMBv3 sessions.

EPSS

0.001

Percentile

47.8%

Related for FG-IR-16-088