Skip to main content
Molaw
Visitor III
May 23, 2022
Question

Unusual number sessions from nordvpn

  • May 23, 2022
  • 8 replies
  • 5745 views

20220523_221142.jpg

My firewall is blocking all the sessions from nordvpn but it still consumes the data. The attached screenshot is of 24hr activity even my servers are shutdown but it is making sessions with my complete IP Pool.

8 replies

Contributor III
May 24, 2022

Could you please share the output for the below-mentioned commands?

config firewall policy
edit <policy id>
sh full
end

To check the policy ID Kindly check the related policy on device GUI(Policy and objects >> Firewall policy/IPv4 policy)

May I know whether do you created any rule or  web filter or application control to block it?

Molaw
MolawAuthor
Visitor III
May 27, 2022

112233

 

bommi
New Member
May 27, 2022

Hi Molaw,

 

in your firewall policy you are allowing "srcaddr all" to access your server.

 

Where do you exactly try to block NordVPN?

Can you show us this policy?

 

Best Regards

Domink

Molaw
MolawAuthor
Visitor III
May 27, 2022

at webfilter level using regex

Molaw
MolawAuthor
Visitor III
May 27, 2022

webfilter.PNG

Molaw
MolawAuthor
Visitor III
May 27, 2022

sessions.PNG

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Fortinet Flag the Hack. Wednesday, August 26, 9:00 AM - 5:00 PM ET, COSM, Atlanta, GA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!