Antivirus detected firewall IP address

[mhrth]

Hello. Recently, there was a brute force attempt against RDP detected on one of our devices. However, the source IP detected comes from our firewall. Please let us know what is causing this and if there is any way for us to narrow down to the true source IP address.

[sharmaj]

Hi

Can you check under Antivirus logs for the same exact traffic?

[Toshi_Esumi]

And, make sure you don't have a VIP for RDP, which is applied to a policy that has NAT enabled.

Toshi