Skip to main content
Test85
Test85
Visitor III
April 4, 2018
Solved

Botnet and C&C logging

  • April 4, 2018
  • 3 replies
  • 7523 views

Hi there,

 

can anyone please tell me where to find logs regarding botnet and C&C?

Is it possible to send an mail for events regarding blocked botnet?

 

I did not find the answer in any documents.

 

Thanks in advance.

 

Best regards,

Thorsten

    Best answer by neonbit

    Just tested this now. It's logged under the AntiVirus section.

    3 replies

    mahesh_secure
    mahesh_secure
    New Member
    April 7, 2018
    Hi Which fortios using? You can block botnet & cc connection in application profile , av profile , dns filter profile and also in interface. You have to enable logging to forticloud , log Disk or fortianalyzer to get the traffic event. Forticloud will send a summary report on 24hr Check the below Link to setup mail notifications http://help.fortinet.com/...ring/Alert%20email.htm Regards Mahesh
    Test85
    Test85Author
    Visitor III
    April 9, 2018

    Hi,

     

    I am using FortiOS 5.6.3

     

    I would like to block botnet & cc connection directly at the interface.

    Logging is enabled to disk.

     

    Just wanted to see what is logged because of our data protection commissioner...

    He is always aware of "protecting" our user rights ;)

     

    Thanks,

    Thorsten

    neonbit
    neonbitAnswer
    New Member
    April 9, 2018

    Just tested this now. It's logged under the AntiVirus section.

    Terms & ConditionsAccessibility statement
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!