Explorer III

Question

Block inside attacks

Hello

How can i block inside attacks like portscan or other attacks with fortigate inside my Lan?

Staff

There are two possible ways as shown also in this article:

- application control with custom signatures

- configuring a DoS policy

More general information can also be found here.

Emirjon

Explorer III

Thanks. How can i find each application signature and use it in app control?

Staff

Hello @rezafathi

This would also help in application detection and control.

regards,

Sheikh

If you have found a solution, please like and mark it as solved to make it easily accessible for everyone.

SuperUser

Hi Reza

Try to configure a new IPS profile that blocks the below signature (Port.Scanning), then use it in your firewall policy.

Note that the default action for this signature is "Allow", that's why it is not blocked in the default IPS profiles.

AEK

Explorer III

I can not find this signature

SuperUser

Make sure your IPS signatures are updated.

diagnose autoupdate versions

AEK

Sign up