Skip to main content
solidblueliquid
solidblueliquid
New Member
December 7, 2018
Question

Can you import IP's in to the Quarantine Log?

  • December 7, 2018
  • 2 replies
  • 5670 views

Hi Everyone,

 

Currently i'm adding people to the Quarantine section of my 100D (5.6.x) by finding the ip in the Forward Traffic, but i wonder if there's a way to add IP's that haven't shown in the forward traffic via the command line?

    2 replies

    neonbit
    neonbit
    New Member
    December 9, 2018

    This KB article shows how you can add IPs via the CLI.

     

    The below example will ban 10.0.1.111 for one hour:

     

    diagnose user quarantine add src4 10.0.1.111 3600 admin

     

    You could add these in a text file, and then upload them to the FortiGate all at once (System > Advanced > Configuration Scripts).

    solidblueliquid
    solidblueliquidAuthor
    New Member
    December 9, 2018

    If i wanted them on a perma ban, is there a number for this?

     

    As for the txt file, would i just repeat the command on each line?

    lxzndr
    lxzndr
    New Member
    August 20, 2021

    solidblueliquid wrote:

    If i wanted them on a perma ban, is there a number for this?

     

    I know this is old, but it wasn't answered:

    instead of 3600 for 1 hour, enter: indefinite  or try 0

     

     

    vikrampaul93
    vikrampaul93
    New Member
    August 25, 2021

    Hi Everyone..

    Terms & ConditionsAccessibility statement