Skip to main content
kamal1
New Member
September 13, 2022
Question

Fortiguard Intrusion prevention - access blocked

  • September 13, 2022
  • 2 replies
  • 45282 views

we having problem with webpage blocked periodically by forti guard.

we notice that username and group name is blank.

Fortiguard blocking access.PNG

 

2 replies

Shilpa1
Staff
Staff
September 13, 2022

Hello @kamal1,


Please check if the action for the category 'search engines and portals'  in the web filter profile set to block.

Or

If you are using proxy-based inspection mode, try changing it to flow mode and have a check.

 

Regards,
Shilpa C.P

mzainuddinahm
Staff & Editor
Staff & Editor
September 13, 2022

Hello Kamal1,

 

Most of the times the Username & Group Name are retrieved from FSSO config on your Fortigate, so if it is a local user then most probably it will return blank values. Kindly check the policy details & the UTM filters applied to it to narrow down the issue. Also, forward traffic log will help in identifying the source IP of the user for this traffic.

 

Regards,

Mohammed Ahmed