FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
edyrmishi
Staff
Staff
Article Id 393722
Description This article describes a specific issue that occurs when editing security profiles with double forward slashes ('//') in their names in the FortiOS v7.4 branch. Attempting to modify such profiles via the GUI results in the entire webpage becoming unresponsive or crashing. This issue is not observed in FortiOS v7.2 or v7.6 branches.
Scope FortiGate, FortiOS v7.4 branch.
Solution

This behavior has been confirmed with the following security profile types:

 

  • Antivirus.
  • Web Filter.
  • Video Filter.
  • DNS Filter.
  • Application Control.
  • Intrusion Prevention.
  • File Filter.
  • WAF.
  • SSL/SSH Inspection.

 

When a security profile name contains '//', accessing or attempting to edit it via the GUI causes the web browser to enter an infinite loop. As a result, the GUI becomes non-responsive, requiring the user to close the browser tab or window.

A new login is necessary to regain GUI access.

 

Note: This issue does not affect the functionality or performance of the FortiGate device itself. It is limited to the behavior of the web browser interface.

 

This issue also causes the Fortinet Support Tool (FST) to crash, preventing data capture for troubleshooting. The issue is reproducible across all major browsers, including Chrome, Firefox, and Microsoft Edge.

 

Reproduction Steps:

 

  • Log in to the FortiGate GUI running FortiOS v7.4.X.
  • Navigate to any Security Profile (for example, Web Filter, Antivirus).
  • Create or rename a profile with '//' in its name (for example, //test).

 

Screenshot 2025-05-27 112846.png

 

  • Return to the Security Profiles section and attempt to edit the profile.

 

Screenshot 2025-05-27 110351.png

 

  • Observe that the GUI freezes or crashes immediately.

 

Workaround:

 

  1. Avoid using '//' in security profile names in the FortiOS v7.4 branch.
  2. If a profile with '//' already exists, rename it via CLI to remove the slashes.

 

CLI commands:

 

config antivirus profile
rename //test to test
end

 

Fortinet is aware of this behavior, and this issue is currently being investigated by the engineering team. If impacted and unable to upgrade immediately, use the workaround above to avoid GUI crashes.