Separate anti DDoS quarantines

Forum|Forum|2 years ago
April 8, 2024
3 replies
2897 views

Hi,
I'm using FotiOS 7.0.14

Behind my Fortigate cluster i have running multimple web services with separate public IPs.
When DOS threshlds are triggered Fortigate starts blocking source IPs including those that belongs to our Pingdom monitoring.
Since quarantine is global it also influence other applications.
Is there a way to configure quarantines per project or public IP?

Best answer by Yurisk

Hi,

nope, there is no such option. But you do have option of creating DDOS policy per source/destination IP - you could create as top most the specific DDOS rules for Pingdom servers IP to basically exempt them from DDOS policy.

YuriskAnswer

SuperUser

Hi,

nope, there is no such option. But you do have option of creating DDOS policy per source/destination IP - you could create as top most the specific DDOS rules for Pingdom servers IP to basically exempt them from DDOS policy.

yurisk.info - all things Fortinet blog, no ads

WaveDevAuthor

New Member

For Pingdom it will not work since they are using some cloud solution for it's uptime checks, and IPs are constantly changing.
Any way, thanks i'we get information that i needed.

AEK

SuperUser

Just a detail.. FG can do anti-DoS, not anti-DDoS.

AEK

Sign up

Login with SSO

Login to the community

Login with SSO