What's new

The following sections describe new features, enhancements, and changes in FortiProxy 7.0.15:

• Improvements to ICAP logs

• CLI changes

Improvements to ICAP logs

FortiProxy 7.0.15 improves the way ICAP errors are presented in the log by categorizing ICAP errors and showing detailed messages for each error in the log. The ICAP replacement message now also includes the ICAP server IP information at the end of the message when applicable.

CLI changes

FortiProxy 7.0.15 includes the following CLI changes:

• diagnose wad tcp-connection list <worker-index>/all—Use this new command to show the information of the top 10 dynamic TCP connections, which is helpful for troubleshooting.

  Example output:

  diagnose wad tcp-connection list all

  ===type=worker index=0 pid=1387===

  Group by src_ip(only show top 10):

  10.5.2.39 count=3160

  Group by dst_ip:port(only show top 10):

  74.6.160.107:443 count=904

  142.251.33.67:80 count=834

  Group by dst_port(only show top 10):

  443 count=1738

  ===type=worker index=1 pid=1389===

  Group by src_ip(only show top 10):

  10.5.2.39 count=3160

  Group by dst_ip:port(only show top 10):

  74.6.160.107:443 count=904

  142.251.33.67:80 count=834

  Group by dst_port(only show top 10):

  443 count=1738

• diagnose wad icap list—Use this new command to show detailed status information for an ICAP server.

  Example output:

  icap-server-name: server1 status: online

  VDOM=root addr=ip/0.0.0.0:1344 health_check=disable

  conns: succ=0 fail=0 ongoing=0 hits=0 blocked=0

  monitor: succ=0 fail=0

  error: stats.no_report_err=0

  num_worker_load=1

• diag wad process[process_name] [index](-1 means all) [<cmd>] ...(up to 32 commands)—Use this new command to send commands to workers in batches. For example, diag wad process worker 1 103 104 means sending commands 103 and 104 to worker 1.

• diag wad report <PROCESS name> <INDEX>—This new command consolidates the following signal-based diagnose commands:

  • diag wad report session

  • diag wad report user

  • diag wad report policy

• diag test app wad—This command adds support for setting a specific group of processes as diagnosis process:

  • diag test app wad 2yxx means setting No.xx process of type y (0~9) as diagnosis process.

  • diag test app wad 2yyxx means setting No.xx process of type yy (10~99) as diagnosis process.

  • diag test app wad 2yyxxx means setting No.xx x process of type yy (0~9) as diagnosis process.

• diagnose wad memory track—New map information in the mmap_stats section.

.