Skip to main content
akeeney
akeeney
New Member
April 16, 2020
Question

IP Address Fabric Connector Issues?

  • April 16, 2020
  • 1 reply
  • 3049 views

Anyone tried using the IP address fabric connectors on the Fortigate platform?  I have two set up on an 81E running 6.2.3, one works and one does not.  The one that does not work is not populating from the source.  If I enter the source url in a browser it shows correctly in the browser with one IP address per line.  This same source works correctly in IP fabric connectors on firmware 6.0.9 on a 90D, but not on this 81E platform running 6.2.3.  Source is https://www.talosintelligence.com/documents/ip-blacklist which is freely available from Talos.  Logs and packet captures show successful connections to and from the source and graceful connection close after communication but the list does not populate.  Thoughts?

    1 reply

    akeeney
    akeeneyAuthor
    New Member
    April 16, 2020

    Been looking at this and also used a different url to point to the same list, http://talosintel.com/feeds/ip-filter.blf .  I think what's going on is both urls redirect to an AWS location that changes each time the list is updated.  Firmware 6.0.9 seems to be OK with the redirect but 6.2.3 doesn't like it.  Any lists I use that do not redirect seem to work fine.  Anyone else out there experience this?

    Terms & ConditionsAccessibility statement
    Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
    Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.