# NTP bursts from FortiGate firewalls

**URL:** <https://community.ntppool.org/t/ntp-bursts-from-fortigate-firewalls/1661>\
**Category:** Uncategorized\
**Created:** [May 19, 2020, 2:49am UTC](https://community.ntppool.org/t/ntp-bursts-from-fortigate-firewalls/1661 "2020-05-19T02:49:29Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![stevesommars](https://sea2.discourse-cdn.com/flex016/user_avatar/community.ntppool.org/stevesommars/32/2075_2.png) [@stevesommars](https://community.ntppool.org/u/stevesommars)\
**Post date:** [May 19, 2020, 2:49am UTC](https://community.ntppool.org/t/ntp-bursts-from-fortigate-firewalls/1661/1 "2020-05-19T02:49:29Z")

</div>

(This summarizes a problem mentioned in other discussions.)

A recent enhancement to FortiOS, used in the FortiGate firewall, did not handle NTP DNS changes correctly. When DNS mapping changed FortiGate firewalls sent 10 second duration NTP bursts at rates that could exceed 20,000 requests/second. NTP Pool servers were impacted due to the use of DNS load balancing. Our team monitored three NTP pool servers and detected over 150 FortiGate devices sending NTP bursts.

FortiGate support identified the problem: Bug ID [607015](https://docs.fortinet.com/document/fortigate/6.2.3/fortios-release-notes/236526/known-issues)

FortiGate support informed us that FortiOS 6.2.4, released on May 12, 2020, fixed the problem. Operators of the FortiGate firewall must install that software, it is not an automatic upgrade. We don’t know when the updates will be complete. Questions should be directed to FortiGate support.

We recommended that FortiGate apply for a [Vendor Zone](https://www.pool.ntp.org/vendors.html) .

Miroslav Lichvar  
Hal Murray  
Steve Sommars

---

_[View the full topic](https://community.ntppool.org/t/ntp-bursts-from-fortigate-firewalls/1661)._