The suit relies on a Civil War-era law that DOJ has increasingly turned to for cyber cases.

But there aren't a lot of answers on how to do that, Grant Schneider says.

The Department of Homeland Security and four branches of the U.S. military had purchased the affected software.

Fortinet acknowledged that an employee altered labels on products to make them appear compliant a law prohibiting federal agencies from acquiring products in specific countries.