FortiSASE
FortiSASE delivers both a consistent security posture and an optimal user experience for users working from anywhere. Secure your hybrid workforce by closing security gaps, plus simplify operations.
jdelafuente_FTNT
Staff & Editor
Staff & Editor
Article Id 405402
Description This article describes how to associate TCP/UDP connections with their specific process IDs to help identify connections when FortiClient is installed on a Windows PC.
Scope FortiClient, EMS, FortiSASE.
Solution

Open two CMD terminals on a Windows PC. In the first run, the 'nestat -ano' command, in the PID column, locates the corresponding process number for the connection to be identified, for example, for TCP connection 185.38.10.11:48600, PID is 9844.

 

PID01.png


In the other CMD window, run the 'tasklist' command and look for the ID requested located above; in this case, PID 9844 is related to the brave.exe application.

 

PID02.png