Question
blocking ports explicit web proxy
hello everyone
i have many infected pc in my organization, and many users using their pc with no antivirus
they all use proxy (fortigate lan ip) in browser settings
so pocket capture shows me a lot of abnormal traffict though my WAN adapter inspite of that these port are not allowed in traffic policy
i have explicit lolicy rules and seems they are allowing such traffic
THREAT my.wan.ip.addr 84.84.137.88 59889 445 TCP SYN with data(8723) My country Netherlands
THREAT my.wan.ip.addr 128.29.247.92 59937 445 TCP SYN with data(8723) My country United States
THREAT my.wan.ip.addr 143.86.21.89 59932 445 TCP SYN with data(8723) My country United States
THREAT my.wan.ip.addr 144.192.54.14 59928 445 TCP SYN with data(8723) My country United States
THREAT my.wan.ip.addr 2.67.116.90 59926 445 TCP SYN with data(8723) My country Sweden
THREAT my.wan.ip.addr 68.101.6.74 59865 445 TCP SYN with data(8723) My country United States
THREAT my.wan.ip.addr 65.55.163.82 59859 443 TCP SYN with data(8723) My country United States
THREAT my.wan.ip.addr 223.126.172.93 59847 445 TCP SYN with data(8723) My country China
THREAT my.wan.ip.addr 211.110.18.25 59821 445 TCP SYN with data(8723) My country Korea Republic Of
THREAT my.wan.ip.addr 75.45.191.94 59777 445 TCP SYN with data(8723) My country United States
THREAT my.wan.ip.addr 209.48.44.236 59775 445 TCP SYN with data(8723) My country United States
THREAT my.wan.ip.addr 222.15.125.40 59764 445 TCP SYN with data(8723) My country Japan
now my questuin is how to stop ttis traffic that goes through explicit proxy. when i enable set transparent enable on an explicit policy rule isers have no web access
