Skip to main content
mohamed44
mohamed44
Visitor III
May 13, 2024
Solved

Scheduled Report of Blocked IPs on FGT

  • May 13, 2024
  • 1 reply
  • 1103 views

Hi Team,

I blocked many IPs on FGT daily is it applicable to send daily report of the blocked IPs in that Day with the Reputation associated with each IP

 

Thanks in advance,

FortiSOAR

#Schedule

Best answer by dspille

This should be pretty easy to do if you have an associated indicator record for the IP's you're blocking. Whenever you block an IP, the status field can be set to "Blocked". Then you can create a report of all IP's blocked within the past day.

 

1 reply

dspille
Staff
dspilleAnswer
Staff
May 13, 2024

This should be pretty easy to do if you have an associated indicator record for the IP's you're blocking. Whenever you block an IP, the status field can be set to "Blocked". Then you can create a report of all IP's blocked within the past day.

 

    oerkan
    oerkan
    Explorer
    May 15, 2024

    Thanks dspille,

    In addition to your contribution, if Mohamed is blocking IPs both on FortiGate and elsewhere, there should be a field in the indicator module that holds the device which he is blocking IPs on.

    So SOAR can generate a specific report including IPs blocked on FortiGate.

     

    Terms & ConditionsAccessibility statement