Skip to main content
dmarckmann
New Member
March 3, 2016
Question

https denied

  • March 3, 2016
  • 0 replies
  • 3734 views

Hi,

recently I've been getting these notices, that I cannot quite explain:

 

date=2016-03-02 time=23:19:01 devname=Fortigate-roadmap devid=FGVM000000047113 logid=0000000013 type=traffic subtype=forward level=notice vd=root srcip=78.192.247.8 srcport=55135 srcintf="port1" dstip=85.234.227.12 dstport=443 dstintf="port2" poluuid=9b6fa346-926e-51e5-b465-e944f8479a82 sessionid=163989795 proto=6 action=deny policyid=12 dstcountry="Netherlands" srccountry="France" trandisp=snat+dnat tranip=10.17.6.12 tranport=443 transip=10.17.6.9 transport=55135 service="HTTPS" duration=31 sentbyte=425 rcvdbyte=1600 sentpkt=4 appcat="unscanned" crscore=30 craction=131072 crlevel=high

 

It could have something to do with a certificate that had also expired around the same time. But I cannot really make that out from the message. Can someone confirm my suspicion or explain what is happening?

 

Thanks in advance,

Dries

    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.