Skip to main content
FixUntilBroken
Visitor III
November 3, 2022
Solved

Policy Violations in 'Log View"

  • November 3, 2022
  • 2 replies
  • 3049 views

FortiManager-VM64 v7.0.3 GA build0254
Log View... Traffic
I notice many "Policy Violations" from china.
Is this just standard "door knocking" on Telnet ports that I can ignore or is it symptom of more serious problem?

China!.png

 

Best answer by kcheng

Hi @FixUntilBroken 

 

This does appear to be the source IP trying to perform a connection attempt to your FortiGate. However, the respective connection was denied/dropped by the policy configuration, that said, the traffic did not go through the FortiGate. Nevertheless, I would still suggest that you turn off unnecessary service on the WAN IP.

2 replies

kcheng
Staff & Editor
kchengAnswer
Staff & Editor
November 4, 2022

Hi @FixUntilBroken 

 

This does appear to be the source IP trying to perform a connection attempt to your FortiGate. However, the respective connection was denied/dropped by the policy configuration, that said, the traffic did not go through the FortiGate. Nevertheless, I would still suggest that you turn off unnecessary service on the WAN IP.

anushty
New Member
November 4, 2022

nice post like it

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!