Technical Tip: Fragmented UDP packets with payload sizes in 1636-1722 byte range may be dropped

Publisher

Fortinet

URL

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Fragmented-UDP-packets-with-payload-sizes-in-1636/ta-p/426716

Published

2026-01-16

Updated

unknown

Accessed

2026-10-02

HTTP status

200

License

Fortinet website terms; no-redistribution; short excerpts and locators only

Source notes citing this source

• Fortinet documents that NP7-based FortiGates with an IPS profile may drop fragmented UDP packets with payloads of 1636 to 1722 bytes on FortiOS releases before 7.4.10, 7.6.5 or 8.0.0. in context
• Fortinet's workarounds for NP7 fragmented-UDP drops include enabling NPU IP reassembly (config system npu, config ip-reassembly, set status enable), disabling auto-asic-offload on the policy, or removing the IPS sensor. in context

Cite this source record

APA

WarmTransfer. (2026, January 16). Technical Tip: Fragmented UDP packets with payload sizes in 1636-1722 byte range may be dropped. WarmTransfer. https://warmtransfer.net/knowledge/sources/fortinet-community-np7-udp-frag-1636

BibTeX

@misc{warmtransfer-fortinet-community-np7-udp-frag-1636,
  title  = {Technical Tip: Fragmented UDP packets with payload sizes in 1636-1722 byte range may be dropped},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/sources/fortinet-community-np7-udp-frag-1636},
  note   = {Fortinet, accessed 2026-10-02}
}