BugZero | Fortinet BugID 1233342 - Traffic drop occurs when ipv4-proto-err is enabled...

BugZero | Fortinet BugID 1233342 - Traffic drop occurs when ipv4-proto-err is enabled...

Fortinet - Defect ID: 1233342

Traffic drop occurs when ipv4-proto-err is enabled on NP7-based FortiGate

Fortinet - Defect ID: 1233342

Traffic drop occurs when ipv4-proto-err is enabled on NP7-based FortiGate

Last updated on April 21st, 2026

BugZero Risk Score
8.0 High

Overall: 8.0

Lifecycle: 10.0

Community: 3.7

What is the BugZero Risk Score?

Fortinet Integration

Learn more about where this data comes from

Fortinet Integration

Bug Scrub Advisor

Streamline upgrades with automated vendor bug scrubs

Bug Scrub Advisor

BugZero Enterprise

Wish you caught this bug sooner? Get proactive today.

BugZero Enterprise

Bug Details

Priority: Unspecified
Status: Fixed
Impacted Service: Firewall

Description

Traffic drop occurs when ipv4-proto-err is enabled on NP7-based FortiGate

Change history

2026-04-21 Added: 8.0.0

Links

Original Vendor Announcement

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 8.0.0

Relevant Products

Click on a version to see all relevant bugs

Affected versions:No known affected versions

Fixed versions: 8.0.0

Top Fortinet Defects

8.0Defect ID: 1217157
GeoIP allow/block functionality fails when configuring VIP with GeoIP as source due to a limitation in number of unique countries (256) that can be added to kernel from a firewall policy
8.0Defect ID: 1224865
Passive port translation occurs when FTP helper is enabled despite VIP port forwarding being disabled
8.0Defect ID: 1233342
Traffic drop occurs when ipv4-proto-err is enabled on NP7-based FortiGate
8.0Defect ID: 1235349
Destination IP addresses become unreachable when auto-asic-offload is enabled on the policy where emac-vlan interfaces are used and VRRP virtual mac is enabled
8.0Defect ID: 1238779
Real server URL health check fails when using http-get with http:// scheme after upgrading to 7.4.9

Ready to prevent the next vendor outage?