Technical Tip: How to enable IP Reputation Blocklist for Virtual Server

[gsharma]

Description	This article describes how to enable IP Reputation Blocklist for Virtual Server.
Scope	FortiADC.
Solution	When IP Reputation Blocklist is configured, it will not function unless it's enabled inside the Application profile. Once IP Reputation Blocklist is configured, follow the below steps to make the list active. Navigate to Server Load Balance -> Application resources -> Application Profile. Create a new application profile (changes cannot be made to default profiles). Give name to new profile, select type and enable the IP Reputation button. This button will ensure that IP reputation module will be enable for that Application profile.  Note: By default, IP reputation is disabled in all Application profiles. Save the config. Navigate to the Virtual server for which IP reputation blocklist have to be enabled. Open the General settings and call the Application profile in which IP Reputation module was enabled. Save the settings.  Logs for IP reputation can thus be seen under security logs. Related documents: Technical Tip: How to enable logging of IP reputation logs for Blocklist IPs Managing IP Reputation Policy settings