Fix invalid memory access crashes in HTTP fake body.

Fix memory leaks in PCRE pattern extractor.

Fix crash on derived packet processing.

Use existing private keys in FortiGate for certificate resigning.

Turn off SNI verification via the existing CLI in SSL-SSH profile.

Use integer instead of lightuserdata to avoid bad lightuserdata pointer.

Support virus URL cache for DLP sensor.

Local URL filter configuration in flow mode web filter does not work when the matching FortiGuard category is also enabled in the web filter profile.

High memory usage by ipsmonitor and ipsengine processes.

Web filter URL filter check is skipped in flow mode certificate inspection if SNI is not present in the TLS client hello.

Fix NULL pointer dereference crash.

Signatures for services other than SSL traffic with the drop action are showing as detected for SSL traffic.

PCAP from IPS not dumped as configured in packet-log-history and packet-log-post-attack settings.