Skip to main content
jeskudero
New Member
April 30, 2019
Question

Multiple log entrys

  • April 30, 2019
  • 1 reply
  • 3164 views

Hello

I have Fortigate 60E with firmware 6.2.0.

I 'm suffering some troubles with application control and industrial signatures when they are been logged.

I have configured one profile to avoid all the communications expect the modbus protocol and specifically read_coils and read_holding_registers.

When I try with some request i could see several log entries for registers (request and replay) but a few more for coils.

In the green boxes are the request (coils, registers and discrete_inputs that are blocked).

Orange boxes are the responses and with the red arrows are the duplicated log entries.

 

Why is fortigate loggin multiple times the same entry?? is a worng configuration issue or is normal?

 

Thanks

    1 reply

    jeskudero
    jeskuderoAuthor
    New Member
    April 30, 2019

    Here is the application control profile configuration:

    Here is the