Fortinet Document Library

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:

Version:


Table of Contents

Built-in IPS engine

Resolved engine issues

Bug ID

Description

539833

Fix invalid memory access crashes in HTTP fake body.

624928

Fix memory leaks in PCRE pattern extractor.

625371

Fix crash on derived packet processing.

637084

Use existing private keys in FortiGate for certificate resigning.

645848

Turn off SNI verification via the existing CLI in SSL-SSH profile.

647330

Use integer instead of lightuserdata to avoid bad lightuserdata pointer.

648079

Support virus URL cache for DLP sensor.

657466

Local URL filter configuration in flow mode web filter does not work when the matching FortiGuard category is also enabled in the web filter profile.

658482

High memory usage by ipsmonitor and ipsengine processes.

660489

Web filter URL filter check is skipped in flow mode certificate inspection if SNI is not present in the TLS client hello.

662573

Fix NULL pointer dereference crash.

662785

Signatures for services other than SSL traffic with the drop action are showing as detected for SSL traffic.

662964

PCAP from IPS not dumped as configured in packet-log-history and packet-log-post-attack settings.

664728

Traffic failing in NGFW policy-based mode when TCP source port range includes a zero value.

Built-in IPS engine

Resolved engine issues

Bug ID

Description

539833

Fix invalid memory access crashes in HTTP fake body.

624928

Fix memory leaks in PCRE pattern extractor.

625371

Fix crash on derived packet processing.

637084

Use existing private keys in FortiGate for certificate resigning.

645848

Turn off SNI verification via the existing CLI in SSL-SSH profile.

647330

Use integer instead of lightuserdata to avoid bad lightuserdata pointer.

648079

Support virus URL cache for DLP sensor.

657466

Local URL filter configuration in flow mode web filter does not work when the matching FortiGuard category is also enabled in the web filter profile.

658482

High memory usage by ipsmonitor and ipsengine processes.

660489

Web filter URL filter check is skipped in flow mode certificate inspection if SNI is not present in the TLS client hello.

662573

Fix NULL pointer dereference crash.

662785

Signatures for services other than SSL traffic with the drop action are showing as detected for SSL traffic.

662964

PCAP from IPS not dumped as configured in packet-log-history and packet-log-post-attack settings.

664728

Traffic failing in NGFW policy-based mode when TCP source port range includes a zero value.