Skip to main content
anjali
anjali
Explorer
July 5, 2022
Question

Regarding device action in fortigate logs

  • July 5, 2022
  • 1 reply
  • 7903 views

Hi all,

Can anybody tell what are the different device actions in fortigate logs and when these actions occur?

Also, what is the difference between device action block, blocked and deny and also between accept and pass?

What is the meaning of device action client-rst and server-rst?

 

    1 reply

    Vichu_94
    Staff
    Vichu_94
    Staff
    July 5, 2022

     Hi Anjali

    Please find the difference between allow, pass, and exempt in UTM feature with the link below:

    https://community.fortinet.com/t5/FortiGate/Technical-Tip-Details-about-quot-pass-quot-and-quot-exempt-quot/ta-p/196171


    As far as the client rst and server rst are tcp reset packet sent by the client or server to close the connection 

    Regards

    anjali
    anjaliAuthor
    Explorer
    July 5, 2022

    Hi Vishal,

    Thank you so much for your reply.

    I got the difference between exempt and pass from the link you provided. But no information on accept.

    And also, what is the difference between block, blocked and deny?

    And about client-rst and server-rst, if the action is client or server-rst, does that mean the event is allowed by the fortigate and the connection is established?

    Terms & ConditionsCookie settingsAccessibility statement