My company recently upgraded from a Fortigate 620b to the 500E and one
of our sites has to use CIPSO. The 500E sees these packets as malformed
and drops them. I can't get approval to tunnel this particular sites
traffic through the 500E, so I'm stuck...