Aug 316 min read

FortiGate getting unwanted access attempts

Updated: Aug 5

I've been getting email alerts from my FortiGate for unwanted attempted access.

I hope this may be useful to users. Feel free to comment and recommend improvements.

This is one of the log event.

date=2024-07-31 time=09:33:29 devid="FG81FPTKXXXXXXXX" devname="XXFW01" eventtime=17226920095189XXXXX tz="-0400" logid="0100032002" type="event" subtype="system" level="alert" vd="root" logdesc="Admin login failed" sn="0" user="XXXXX" ui="https(185.XXX.XX.XXX)" method="https" srcip=185.XXX.XXX.XXX dstip=99.XXX.XXX.XXX action="login" status="failed" reason="name_invalid" msg="Administrator XXXXX login failed from https(185.XXX.XXX.XXX) because of invalid user name"

To resolve this issue I did the following. These are the alerts I'm logging and getting emailed on. Also added configs for geography to make it easy to configure configs.

This is my automation for email alerts

# Automation for logon events and more

config system automation-trigger

edit "FortiOS Logs"

set event-type event-log

set logid 32561 32021 32002 32001 32003 32024 32010 41001 41000 20116 20117 20109 32015 43555

end

config system automation-stitch

edit "FortiOS Logs"

set trigger "FortiOS Logs"

config actions

edit 1

set action "Notification Email"

set required enable

end

# Automation for logon events and more

# Create Geo Lists and groups

config firewall address

edit "Andorra"

set type geography

set country "AD"

set color 2

edit "United Arab Emirates"

set type geography

set country "AE"

set color 2

edit "Afghanistan"

set type geography

set country "AF"

set color 2

edit "Antigua and Barbuda"

set type geography

set country "AG"

set color 2

edit "Anguilla"

set type geography

set country "AI"

set color 2

edit "Albania"

set type geography

set country "AL"

set color 2

edit "Armenia"

set type geography

set country "AM"

set color 2

edit "Netherlands Antilles"

set type geography

set country "AN"

set color 2

edit "Angola"

set type geography

set country "AO"

set color 2

edit "Antarctica"

set type geography

set country "AQ"

set color 2

edit "Argentina"

set type geography

set country "AR"

set color 2

edit "American Samoa"

set type geography

set country "AS"

set color 2

edit "Austria"

set type geography

set country "AT"

set color 2

edit "Australia"

set type geography

set country "AU"

set color 2

edit "Aruba"

set type geography

set country "AW"

set color 2

edit "Aland Islands"

set type geography

set country "AX"

set color 2

edit "Azerbaijan"

set type geography

set country "AZ"

set color 2

edit "Bosnia and Herzegovina"

set type geography

set country "BA"

set color 2

edit "Barbados"

set type geography

set country "BB"

set color 2

edit "Bangladesh"

set type geography

set country "BD"

set color 2

edit "Belgium"

set type geography

set country "BE"

set color 2

edit "Burkina Faso"

set type geography

set country "BF"

set color 2

edit "Bulgaria"

set type geography

set country "BG"

set color 2

edit "Bahrain"

set type geography

set country "BH"

set color 2

edit "Burundi"

set type geography

set country "BI"

set color 2

edit "Benin"

set type geography

set country "BJ"

set color 2

edit "Saint Bartelemey"

set type geography

set country "BL"

set color 2

edit "Bermuda"

set type geography

set country "BM"

set color 2

edit "Brunei Darussalam"

set type geography

set country "BN"

set color 2

edit "Bolivia"

set type geography

set country "BO"

set color 2

edit "Bonaire, Saint Eustatius and Saba"

set type geography

set country "BQ"

set color 2

edit "Brazil"

set type geography

set country "BR"

set color 2

edit "Bahamas"

set type geography

set country "BS"

set color 2

edit "Bhutan"

set type geography

set country "BT"

set color 2

edit "Bouvet Island"

set type geography

set country "BV"

set color 2

edit "Botswana"

set type geography

set country "BW"

set color 2

edit "Belarus"

set type geography

set country "BY"

set color 2

edit "Belize"

set type geography

set country "BZ"

set color 2

edit "Canada"

set type geography

set country "CA"

set color 2

edit "Cocos -Keeling- Islands"

set type geography

set country "CC"

set color 2

edit "Congo, The Democratic Republic of the"

set type geography

set country "CD"

set color 2

edit "Central African Republic"

set type geography

set country "CF"

set color 2

edit "Congo"

set type geography

set country "CG"

set color 2

edit "Switzerland"

set type geography

set country "CH"

set color 2

edit "Cote dIvoire"

set type geography

set country "CI"

set color 2

edit "Cook Islands"

set type geography

set country "CK"

set color 2

edit "Chile"

set type geography

set country "CL"

set color 2

edit "Cameroon"

set type geography

set country "CM"

set color 2

edit "China"

set type geography

set country "CN"

set color 2

edit "Colombia"

set type geography

set country "CO"

set color 2

edit "Costa Rica"

set type geography

set country "CR"

set color 2

edit "Cuba"

set type geography

set country "CU"

set color 2

edit "Cape Verde"

set type geography

set country "CV"

set color 2

edit "Curacao"

set type geography

set country "CW"

set color 2

edit "Christmas Island"

set type geography

set country "CX"

set color 2

edit "Cyprus"

set type geography

set country "CY"

set color 2

edit "Czech Republic"

set type geography

set country "CZ"

set color 2

edit "Germany"

set type geography

set country "DE"

set color 2

edit "Djibouti"

set type geography

set country "DJ"

set color 2

edit "Denmark"

set type geography

set country "DK"

set color 2

edit "Dominica"

set type geography

set country "DM"

set color 2

edit "Dominican Republic"

set type geography

set country "DO"

set color 2

edit "Algeria"

set type geography

set country "DZ"

set color 2

edit "Ecuador"

set type geography

set country "EC"

set color 2

edit "Estonia"

set type geography

set country "EE"

set color 2

edit "Egypt"

set type geography

set country "EG"

set color 2

edit "Western Sahara"

set type geography

set country "EH"

set color 2

edit "Eritrea"

set type geography

set country "ER"

set color 2

edit "Spain"

set type geography

set country "ES"

set color 2

edit "Ethiopia"

set type geography

set country "ET"

set color 2

edit "Finland"

set type geography

set country "FI"

set color 2

edit "Fiji"

set type geography

set country "FJ"

set color 2

edit "Falkland Islands -Malvinas-"

set type geography

set country "FK"

set color 2

edit "Micronesia, Federated States of"

set type geography

set country "FM"

set color 2

edit "Faroe Islands"

set type geography

set country "FO"

set color 2

edit "France"

set type geography

set country "FR"

set color 2

edit "Gabon"

set type geography

set country "GA"

set color 2

edit "United Kingdom"

set type geography

set country "GB"

set color 2

edit "Grenada"

set type geography

set country "GD"

set color 2

edit "Georgia"

set type geography

set country "GE"

set color 2

edit "French Guiana"

set type geography

set country "GF"

set color 2

edit "Guernsey"

set type geography

set country "GG"

set color 2

edit "Ghana"

set type geography

set country "GH"

set color 2

edit "Gibraltar"

set type geography

set country "GI"

set color 2

edit "Greenland"

set type geography

set country "GL"

set color 2

edit "Gambia"

set type geography

set country "GM"

set color 2

edit "Guinea"

set type geography

set country "GN"

set color 2

edit "Guadeloupe"

set type geography

set country "GP"

set color 2

edit "Equatorial Guinea"

set type geography

set country "GQ"

set color 2

edit "Greece"

set type geography

set country "GR"

set color 2

edit "South Georgia and the South Sandwich Islands"

set type geography

set country "GS"

set color 2

edit "Guatemala"

set type geography

set country "GT"

set color 2

edit "Guam"

set type geography

set country "GU"

set color 2

edit "Guinea-Bissau"

set type geography

set country "GW"

set color 2

edit "Guyana"

set type geography

set country "GY"

set color 2

edit "Hong Kong"

set type geography

set country "HK"

set color 2

edit "Heard Island and McDonald Islands"

set type geography

set country "HM"

set color 2

edit "Honduras"

set type geography

set country "HN"

set color 2

edit "Croatia"

set type geography

set country "HR"

set color 2

edit "Haiti"

set type geography

set country "HT"

set color 2

edit "Hungary"

set type geography

set country "HU"

set color 2

edit "Indonesia"

set type geography

set country "ID"

set color 2

edit "Ireland"

set type geography

set country "IE"

set color 2

edit "Israel"

set type geography

set country "IL"

set color 2

edit "Isle of Man"

set type geography

set country "IM"

set color 2

edit "India"

set type geography

set country "IN"

set color 2

edit "British Indian Ocean Territory"

set type geography

set country "IO"

set color 2

edit "Iraq"

set type geography

set country "IQ"

set color 2

edit "Iran, Islamic Republic of"

set type geography

set country "IR"

set color 2

edit "Iceland"

set type geography

set country "IS"

set color 2

edit "Italy"

set type geography

set country "IT"

set color 2

edit "Jersey"

set type geography

set country "JE"

set color 2

edit "Jamaica"

set type geography

set country "JM"

set color 2

edit "Jordan"

set type geography

set country "JO"

set color 2

edit "Japan"

set type geography

set country "JP"

set color 2

edit "Kenya"

set type geography

set country "KE"

set color 2

edit "Kyrgyzstan"

set type geography

set country "KG"

set color 2

edit "Cambodia"

set type geography

set country "KH"

set color 2

edit "Kiribati"

set type geography

set country "KI"

set color 2

edit "Comoros"

set type geography

set country "KM"

set color 2

edit "Saint Kitts and Nevis"

set type geography

set country "KN"

set color 2

edit "Korea, Democratic Peoples Republic of"

set type geography

set country "KP"

set color 2

edit "Korea, Republic of"

set type geography

set country "KR"

set color 2

edit "Kuwait"

set type geography

set country "KW"

set color 2

edit "Cayman Islands"

set type geography

set country "KY"

set color 2

edit "Kazakhstan"

set type geography

set country "KZ"

set color 2

edit "Lao Peoples Democratic Republic"

set type geography

set country "LA"

set color 2

edit "Lebanon"

set type geography

set country "LB"

set color 2

edit "Saint Lucia"

set type geography

set country "LC"

set color 2

edit "Liechtenstein"

set type geography

set country "LI"

set color 2

edit "Sri Lanka"

set type geography

set country "LK"

set color 2

edit "Liberia"

set type geography

set country "LR"

set color 2

edit "Lesotho"

set type geography

set country "LS"

set color 2

edit "Lithuania"

set type geography

set country "LT"

set color 2

edit "Luxembourg"

set type geography

set country "LU"

set color 2

edit "Latvia"

set type geography

set country "LV"

set color 2

edit "Libyan Arab Jamahiriya"

set type geography

set country "LY"

set color 2

edit "Morocco"

set type geography

set country "MA"

set color 2

edit "Monaco"

set type geography

set country "MC"

set color 2

edit "Moldova, Republic of"

set type geography

set country "MD"

set color 2

edit "Montenegro"

set type geography

set country "ME"

set color 2

edit "Saint Martin"

set type geography

set country "MF"

set color 2

edit "Madagascar"

set type geography

set country "MG"

set color 2

edit "Marshall Islands"

set type geography

set country "MH"

set color 2

edit "Macedonia"

set type geography

set country "MK"

set color 2

edit "Mali"

set type geography

set country "ML"

set color 2

edit "Myanmar"

set type geography

set country "MM"

set color 2

edit "Mongolia"

set type geography

set country "MN"

set color 2

edit "Macao"

set type geography

set country "MO"

set color 2

edit "Northern Mariana Islands"

set type geography

set country "MP"

set color 2

edit "Martinique"

set type geography

set country "MQ"

set color 2

edit "Mauritania"

set type geography

set country "MR"

set color 2

edit "Montserrat"

set type geography

set country "MS"

set color 2

edit "Malta"

set type geography

set country "MT"

set color 2

edit "Mauritius"

set type geography

set country "MU"

set color 2

edit "Maldives"

set type geography

set country "MV"

set color 2

edit "Malawi"

set type geography

set country "MW"

set color 2

edit "Mexico"

set type geography

set country "MX"

set color 2

edit "Malaysia"

set type geography

set country "MY"

set color 2

edit "Mozambique"

set type geography

set country "MZ"

set color 2

edit "Namibia"

set type geography

set country "NA"

set color 2

edit "New Caledonia"

set type geography

set country "NC"

set color 2

edit "Niger"

set type geography

set country "NE"

set color 2

edit "Norfolk Island"

set type geography

set country "NF"

set color 2

edit "Nigeria"

set type geography

set country "NG"

set color 2

edit "Nicaragua"

set type geography

set country "NI"

set color 2

edit "Netherlands"

set type geography

set country "NL"

set color 2

edit "Norway"

set type geography

set country "NO"

set color 2

edit "Nepal"

set type geography

set country "NP"

set color 2

edit "Nauru"

set type geography

set country "NR"

set color 2

edit "Niue"

set type geography

set country "NU"

set color 2

edit "New Zealand"

set type geography

set country "NZ"

set color 2

edit "Oman"

set type geography

set country "OM"

set color 2

edit "Panama"

set type geography

set country "PA"

set color 2

edit "Peru"

set type geography

set country "PE"

set color 2

edit "French Polynesia"

set type geography

set country "PF"

set color 2

edit "Papua New Guinea"

set type geography

set country "PG"

set color 2

edit "Philippines"

set type geography

set country "PH"

set color 2

edit "Pakistan"

set type geography

set country "PK"

set color 2

edit "Poland"

set type geography

set country "PL"

set color 2

edit "Saint Pierre and Miquelon"

set type geography

set country "PM"

set color 2

edit "Pitcairn"

set type geography

set country "PN"

set color 2

edit "Puerto Rico"

set type geography

set country "PR"

set color 2

edit "Palestinian Territory"

set type geography

set country "PS"

set color 2

edit "Portugal"

set type geography

set country "PT"

set color 2

edit "Palau"

set type geography

set country "PW"

set color 2

edit "Paraguay"

set type geography

set country "PY"

set color 2

edit "Qatar"

set type geography

set country "QA"

set color 2

edit "Reunion"

set type geography

set country "RE"

set color 2

edit "Romania"

set type geography

set country "RO"

set color 2

edit "Serbia"

set type geography

set country "RS"

set color 2

edit "Russian Federation"

set type geography

set country "RU"

set color 2

edit "Rwanda"

set type geography

set country "RW"

set color 2

edit "Saudi Arabia"

set type geography

set country "SA"

set color 2

edit "Solomon Islands"

set type geography

set country "SB"

set color 2

edit "Seychelles"

set type geography

set country "SC"

set color 2

edit "Sudan"

set type geography

set country "SD"

set color 2

edit "Sweden"

set type geography

set country "SE"

set color 2

edit "Singapore"

set type geography

set country "SG"

set color 2

edit "Saint Helena"

set type geography

set country "SH"

set color 2

edit "Slovenia"

set type geography

set country "SI"

set color 2

edit "Svalbard and Jan Mayen"

set type geography

set country "SJ"

set color 2

edit "Slovakia"

set type geography

set country "SK"

set color 2

edit "Sierra Leone"

set type geography

set country "SL"

set color 2

edit "San Marino"

set type geography

set country "SM"

set color 2

edit "Senegal"

set type geography

set country "SN"

set color 2

edit "Somalia"

set type geography

set country "SO"

set color 2

edit "Suriname"

set type geography

set country "SR"

set color 2

edit "South Sudan"

set type geography

set country "SS"

set color 2

edit "Sao Tome and Principe"

set type geography

set country "ST"

set color 2

edit "El Salvador"

set type geography

set country "SV"

set color 2

edit "Sint Maarten"

set type geography

set country "SX"

set color 2

edit "Syrian Arab Republic"

set type geography

set country "SY"

set color 2

edit "Swaziland"

set type geography

set country "SZ"

set color 2

edit "Turks and Caicos Islands"

set type geography

set country "TC"

set color 2

edit "Chad"

set type geography

set country "TD"

set color 2

edit "French Southern Territories"

set type geography

set country "TF"

set color 2

edit "Togo"

set type geography

set country "TG"

set color 2

edit "Thailand"

set type geography

set country "TH"

set color 2

edit "Tajikistan"

set type geography

set country "TJ"

set color 2

edit "Tokelau"

set type geography

set country "TK"

set color 2

edit "Timor-Leste"

set type geography

set country "TL"

set color 2

edit "Turkmenistan"

set type geography

set country "TM"

set color 2

edit "Tunisia"

set type geography

set country "TN"

set color 2

edit "Tonga"

set type geography

set country "TO"

set color 2

edit "Turkey"

set type geography

set country "TR"

set color 2

edit "Trinidad and Tobago"

set type geography

set country "TT"

set color 2

edit "Tuvalu"

set type geography

set country "TV"

set color 2

edit "Taiwan"

set type geography

set country "TW"

set color 2

edit "Tanzania, United Republic of"

set type geography

set country "TZ"

set color 2

edit "Ukraine"

set type geography

set country "UA"

set color 2

edit "Uganda"

set type geography

set country "UG"

set color 2

edit "United States Minor Outlying Islands"

set type geography

set country "UM"

set color 2

edit "United States"

set type geography

set country "US"

set color 2

edit "Uruguay"

set type geography

set country "UY"

set color 2

edit "Uzbekistan"

set type geography

set country "UZ"

set color 2

edit "Holy See -Vatican City State-"

set type geography

set country "VA"

set color 2

edit "Saint Vincent and the Grenadines"

set type geography

set country "VC"

set color 2

edit "Venezuela"

set type geography

set country "VE"

set color 2

edit "Virgin Islands, British"

set type geography

set country "VG"

set color 2

edit "Virgin Islands, U.S."

set type geography

set country "VI"

set color 2

edit "Vietnam"

set type geography

set country "VN"

set color 2

edit "Vanuatu"

set type geography

set country "VU"

set color 2

edit "Wallis and Futuna"

set type geography

set country "WF"

set color 2

edit "Samoa"

set type geography

set country "WS"

set color 2

edit "Kosovo"

set type geography

set country "XK"

set color 2

edit "Yemen"

set type geography

set country "YE"

set color 2

edit "Mayotte"

set type geography

set country "YT"

set color 2

edit "South Africa"

set type geography

set country "ZA"

set color 2

edit "Zambia"

set type geography

set country "ZM"

set color 2

edit "Zimbabwe"

set type geography

set country "ZW"

set color 2

end

config firewall addrgrp

edit "Africa"

set member "Algeria" "Angola" "Benin" "Botswana" "British Indian Ocean Territory" "Burkina Faso" "Burundi" "Cameroon" "Cape Verde" "Central African Republic" "Chad" "Comoros" "Congo" "Congo, The Democratic Republic of the" "Cote dIvoire" "Djibouti" "Egypt" "Equatorial Guinea" "Eritrea" "Ethiopia" "French Southern Territories" "Gabon" "Gambia" "Ghana" "Guinea" "Guinea-Bissau" "Kenya" "Lesotho" "Liberia" "Libyan Arab Jamahiriya" "Madagascar" "Malawi" "Mali" "Mauritania" "Mauritius" "Mayotte" "Morocco" "Mozambique" "Namibia" "Niger" "Nigeria" "Reunion" "Rwanda" "Saint Helena" "Sao Tome and Principe" "Senegal" "Seychelles" "Sierra Leone" "Somalia" "South Africa" "South Sudan" "Sudan" "Swaziland" "Tanzania, United Republic of" "Togo" "Tunisia" "Uganda" "Western Sahara" "Zambia" "Zimbabwe"

set color 2

edit "Americas"

set member "Anguilla" "Antigua and Barbuda" "Argentina" "Aruba" "Bahamas" "Barbados" "Belize" "Bermuda" "Bolivia" "Bonaire, Saint Eustatius and Saba" "Bouvet Island" "Brazil" "Canada" "Cayman Islands" "Chile" "Colombia" "Costa Rica" "Cuba" "Curacao" "Dominica" "Dominican Republic" "Ecuador" "El Salvador" "Falkland Islands -Malvinas-" "French Guiana" "Greenland" "Grenada" "Guadeloupe" "Guatemala" "Guyana" "Haiti" "Honduras" "Jamaica" "Martinique" "Mexico" "Montserrat" "Netherlands Antilles" "Nicaragua" "Panama" "Paraguay" "Peru" "Puerto Rico" "Saint Bartelemey" "Saint Kitts and Nevis" "Saint Lucia" "Saint Martin" "Saint Pierre and Miquelon" "Saint Vincent and the Grenadines" "Sint Maarten" "South Georgia and the South Sandwich Islands" "Suriname" "Trinidad and Tobago" "Turks and Caicos Islands" "United States" "Uruguay" "Venezuela" "Virgin Islands, British" "Virgin Islands, U.S."

set color 2

edit "Asia"

set member "Afghanistan" "Armenia" "Azerbaijan" "Bahrain" "Bangladesh" "Bhutan" "Brunei Darussalam" "Cambodia" "China" "Cyprus" "Georgia" "Hong Kong" "India" "Indonesia" "Iran, Islamic Republic of" "Iraq" "Israel" "Japan" "Jordan" "Kazakhstan" "Korea, Democratic Peoples Republic of" "Korea, Republic of" "Kuwait" "Kyrgyzstan" "Lao Peoples Democratic Republic" "Lebanon" "Macao" "Malaysia" "Maldives" "Mongolia" "Myanmar" "Nepal" "Oman" "Pakistan" "Palestinian Territory" "Philippines" "Qatar" "Saudi Arabia" "Singapore" "Sri Lanka" "Syrian Arab Republic" "Taiwan" "Tajikistan" "Thailand" "Timor-Leste" "Turkey" "Turkmenistan" "United Arab Emirates" "Uzbekistan" "Vietnam" "Yemen"

set color 2

edit "Europe"

set member "Aland Islands" "Albania" "Andorra" "Austria" "Belarus" "Belgium" "Bosnia and Herzegovina" "Bulgaria" "Croatia" "Czech Republic" "Denmark" "Estonia" "Faroe Islands" "Finland" "France" "Germany" "Gibraltar" "Greece" "Guernsey" "Holy See -Vatican City State-" "Hungary" "Iceland" "Ireland" "Isle of Man" "Italy" "Jersey" "Kosovo" "Latvia" "Liechtenstein" "Lithuania" "Luxembourg" "Macedonia" "Malta" "Moldova, Republic of" "Monaco" "Montenegro" "Netherlands" "Norway" "Poland" "Portugal" "Romania" "Russian Federation" "San Marino" "Serbia" "Slovakia" "Slovenia" "Spain" "Svalbard and Jan Mayen" "Sweden" "Switzerland" "Ukraine" "United Kingdom"

set color 2

edit "Oceania"

set member "American Samoa" "Australia" "Christmas Island" "Cocos -Keeling- Islands" "Cook Islands" "Fiji" "French Polynesia" "Guam" "Heard Island and McDonald Islands" "Kiribati" "Marshall Islands" "Micronesia, Federated States of" "Nauru" "New Caledonia" "New Zealand" "Niue" "Norfolk Island" "Northern Mariana Islands" "Palau" "Papua New Guinea" "Pitcairn" "Samoa" "Solomon Islands" "Tokelau" "Tonga" "Tuvalu" "United States Minor Outlying Islands" "Vanuatu" "Wallis and Futuna"

set color 2

end

config firewall addrgrp

edit "Geo-Block"

set member "United Arab Emirates" "Afghanistan" "Albania" "Armenia" "Angola" "Azerbaijan" "Bosnia and Herzegovina" "Burkina Faso" "Bulgaria" "Bahrain" "Botswana" "Congo" "Congo, The Democratic Republic of the" "Cuba" "Czech Republic" "Iran, Islamic Republic of" "Iraq" "Korea, Democratic Peoples Republic of" "Kuwait" "Luxembourg" "Latvia" "Libyan Arab Jamahiriya" "Niger" "Pakistan" "Russian Federation" "Saudi Arabia" "Sudan" "Sierra Leone" "Somalia" "Suriname" "South Sudan" "Syrian Arab Republic"

set color 6

end

# Create Geo Lists and groups

# Create Local In Policies for unwanted traffic

# adjust as needed for your requirements

config firewall local-in-policy

edit 100

set intf "wan1" "wan2" "ATT"

set dstaddr "all"

set internet-service-src enable

set internet-service-src-name "Botnet-C&C.Server" "CriminalIP-Scanner" "Malicious-Malicious.Server" "Phishing-Phishing.Server" "Proxy-Proxy.Server" "Spam-Spamming.Server" "Tor-Exit.Node" "Tor-Relay.Node" "VPN-Anonymous.VPN"

set service "ALL"

set schedule "always"

set comments "Block unwanted ISDB"

edit 101

set intf "wan1" "wan2" "ATT"

set srcaddr "Geo-Block"

set dstaddr "all"

set service "ALL"

set schedule "always"

set comments "Block unwanted Countries"

edit 1

set intf "wan1" "wan2" "ATT"

set srcaddr "United States"

set dstaddr "all"

set action accept

set service "TCP-9443" "TCP-8443" "IKE" "ESP"

set schedule "always"

set virtual-patch enable

set comments "Allow only US to 8443,9443, IPSEC"

edit 2

set intf "wan1" "wan2" "ATT"

set dstaddr "all"

set internet-service-src enable

set internet-service-src-name "Amazon-AWS" "Microsoft-Azure" "Google-Google.Cloud"

set action accept

set service "HTTP" "HTTPS"

set schedule "always"

set virtual-patch enable

set comments "Allow only US to 80,443, letsencrypt"

edit 3

set intf "wan1" "wan2" "ATT"

set dstaddr "all"

set internet-service-src enable

set internet-service-src-name "Fortinet-FortiClient.EMS" "Fortinet-FortiGuard.SOCaaS" "Fortinet-FortiSASE" "Fortinet-FortiWeb.Cloud" "Fortinet-Other"

set service "ALL"

set schedule "always"

edit 4

set intf "wan1" "wan2" "ATT"

set srcaddr "all"

set dstaddr "all"

set action accept

set service "TCP-4433"

set schedule "always"

set virtual-patch enable

edit 1000

set intf "wan1" "wan2" "ATT"

set srcaddr "all"

set dstaddr "all"

set service "ALL"

set schedule "always"

set comments "Deny All"

end

# Create Local In Policies for unwanted traffic

# adjust as needed for your requirements

Show logs, configure filter settings.

execute log filter dump

category: event

device: memory

start-line: 21

view-lines: 10

max-checklines: 0

HA member:

log search mode: on-demand

pre-fetch-pages: 2

Oftp search string:

execute log filter device

Available devices:

0: memory

1: disk

2: fortianalyzer

3: fortianalyzer-cloud

4: forticloud

execute log filter device 0

execute log filter category

Available categories:

0: traffic

1: event

2: utm-virus

3: utm-webfilter

4: utm-ips

5: utm-emailfilter

7: utm-anomaly

8: utm-voip

9: utm-dlp

10: utm-app-ctrl

12: utm-waf

15: utm-dns

16: utm-ssh

17: utm-ssl

19: utm-file-filter

20: utm-icap

22: utm-sctp-filter

23: forti-switch

24: utm-virtual-patch

25: utm-casb

execute log filter category 1

# Show logs

execute log display

Your Alerts should now be to a minimum, enjoy.

FortiGate getting unwanted access attempts

Recent Posts

Comments