Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides
(client and server) have terminated the session?

Question

Why does FortiGate keep TCP sessions in the session table for some seconds even after both sides(client and server) have terminated the session?

Camille Rudio · Accepted Answer

To allow for out-of-order packets that could arrive after the FIN/ACK packets.

Camille Rudio · Answer

To remove the NAT operation.

Camille Rudio · Answer

To generate logs

Camille Rudio · Answer

To finish any inspection operations.

List of questions