Adding Fortilink to existing LAG

[1mm]

Hello,

We have fortigate In azure, we would like to Prevent Port Scanning. Is it possible and how I can do it?
I tried create IPS policy and select Port.scanning, but it didn't work 

Is it possible prevent port scanning with IPS Profile? 

[Dannу]

IPS: https://www.fortiguard.com/encyclopedia/ips/43814

AppControl: Technical Tip: How to block NMAP port scanner

Don't forget to block Internet port scanners, such as Shodan, Censys, Qualys, Shadowserver etc.

[hbac]

Hi @1mm,

You can use DoS policy to prevent port scans: https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/771644/dos-policy

Regards, 

[1mm]

Hello, thanks for replies, is it possible don't block anything and just do logging? 

[hbac · Accepted solution]

Hi @1mm,

Yes, you can set action to monitor. 

Regards,