Additional configuration to prevent this FortiGate behavior was introduced in FortiOS 6.0.10, 6.2.4, 6.4.1 as part of FG-IR-19-283 published in July 2020.
Who the hell has not patched since 2020?
looks at several 1000C we still have in service. ah fuck.