Unlock Exclusive Benefits
Join Our Community Today!
Join our community and post in the forum to earn your exclusive Holiday badge! Become a member today!
LOGIN/REGISTER
CONTINUE AS A GUEST
- Support Forum
- Knowledge Base
- Customer Service
- Internal Article Nominations
- FortiGate
- FortiClient
- FortiAP
- FortiAnalyzer
- FortiADC
- FortiAuthenticator
- FortiBridge
- FortiCache
- FortiCarrier
- FortiCASB
- FortiConnect
- FortiConverter
- FortiCNP
- FortiDAST
- FortiDDoS
- FortiDB
- FortiDNS
- FortiDLP
- FortiDeceptor
- FortiDevSec
- FortiDirector
- FortiEDR
- FortiExtender
- FortiGate Cloud
- FortiGuard
- FortiHypervisor
- FortiGuest
- FortiInsight
- FortiIsolator
- FortiMail
- FortiMonitor
- FortiManager
- FortiNAC
- FortiNAC-F
- FortiNDR (on-premise)
- FortiNDRCloud
- FortiPhish
- FortiPAM
- FortiPortal
- FortiProxy
- FortiRecon
- FortiRecorder
- FortiSRA
- FortiSandbox
- FortiScan
- FortiSASE
- FortiSIEM
- FortiSOAR
- FortiSwitch
- FortiTester
- FortiToken
- FortiWAN
- FortiVoice
- FortiWeb
- FortiAppSec Cloud
- Lacework
- RMA Information and Announcements
- Wireless Controller
- FortiCloud Products
- ZTNA
- 4D Documents
- Customer Service
- Community Groups
- Blogs
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
- Fortinet Community
- Support Forum
- Antivirus detected firewall IP address
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Antivirus detected firewall IP address
Hello. Recently, there was a brute force attempt against RDP detected on one of our devices. However, the source IP detected comes from our firewall. Please let us know what is causing this and if there is any way for us to narrow down to the true source IP address.
Labels:
- Labels:
-
FortiGate
2 REPLIES 2
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Hi
Can you check under Antivirus logs for the same exact traffic?
Jay sharma
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
And, make sure you don't have a VIP for RDP, which is applied to a policy that has NAT enabled.
Toshi
Announcements
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
Labels
-
FortiGate
8,929 -
FortiClient
1,800 -
5.2
801 -
FortiManager
762 -
5.4
639 -
FortiAnalyzer
574 -
FortiSwitch
489 -
FortiAP
480 -
FortiClient EMS
444 -
6.0
416 -
5.6
362 -
FortiMail
326 -
SSL-VPN
262 -
6.2
251 -
FortiAuthenticator v5.5
234 -
IPsec
226 -
FortiWeb
213 -
FortiNAC
199 -
5.0
196 -
FortiGuard
141 -
6.4
128 -
SD-WAN
122 -
FortiAuthenticator
114 -
FortiGateCloud
102 -
FortiSIEM
99 -
FortiCloud Products
99 -
FortiToken
92 -
Firewall policy
89 -
Wireless Controller
82 -
Customer Service
81 -
FortiProxy
65 -
4.0MR3
64 -
High Availability
62 -
Fortivoice
58 -
FortiEDR
54 -
FortiADC
54 -
VLAN
53 -
ZTNA
53 -
Routing
49 -
DNS
48 -
FortiSandbox
46 -
FortiExtender
46 -
FortiDNS
42 -
BGP
42 -
LDAP
42 -
SAML
41 -
RADIUS
40 -
Authentication
39 -
NAT
38 -
Certificate
38 -
SSO
36 -
FortiGate v5.4
35 -
FortiSwitch v6.4
34 -
VDOM
33 -
Interface
32 -
FortiConnect
31 -
FortiLink
31 -
Application control
30 -
FortiGate-VM
28 -
FortiWAN
27 -
Web profile
27 -
Logging
26 -
Virtual IP
26 -
FortiConverter
25 -
FortiGate v5.2
24 -
FortiPAM
23 -
SSL SSH inspection
23 -
FortiPortal
20 -
FortiSwitch v6.2
19 -
Fortigate Cloud
19 -
Traffic shaping
19 -
FortiMonitor
18 -
SSID
17 -
OSPF
16 -
Automation
16 -
WAN optimization
16 -
FortiDDoS
15 -
SNMP
15 -
Static route
15 -
System settings
15 -
FortiGate v5.0
14 -
FortiSOAR
14 -
Web application firewall profile
14 -
IP address management - IPAM
14 -
Admin
13 -
FortiCASB
12 -
Security profile
12 -
FortiManager v5.0
11 -
FortiRecorder
11 -
IPS signature
11 -
Proxy policy
11 -
FortiManager v4.0
10 -
FortiBridge
10 -
Traffic shaping policy
10 -
FortiAP profile
10 -
Intrusion prevention
10 -
4.0MR2
9 -
FortiGate v4.0 MR3
9 -
FortiWeb v5.0
9 -
FortiDeceptor
8 -
RMA Information and Announcements
8 -
DNS filter
8 -
Port policy
8 -
Fortinet Engage Partner Program
8 -
4.0
7 -
FortiAnalyzer v5.0
7 -
FortiCache
7 -
Explicit proxy
7 -
Antivirus profile
7 -
Traffic shaping profile
7 -
Fabric connector
7 -
Web rating
7 -
FortiToken Cloud
6 -
API
6 -
trunk
6 -
Packet capture
6 -
FortiCarrier
5 -
FortiTester
5 -
Users
5 -
Authentication rule and scheme
5 -
Email filter profile
5 -
3.6
4 -
FortiScan
4 -
FortiDirector
4 -
Internet service database
4 -
Application signature
4 -
DLP sensor
4 -
Netflow
4 -
Protocol option
4 -
TACACS
4 -
Replacement messages
4 -
Service
4 -
Cloud Management Security
4 -
FortiDB
3 -
FortiHypervisor
3 -
FortiNDR
3 -
NAC policy
3 -
DLP Dictionary
3 -
DLP profile
3 -
DoS policy
3 -
SDN connector
3 -
VoIP profile
3 -
Multicast routing
3 -
FortiInsight
2 -
FortiAI
2 -
Kerberos
2 -
Schedule
2 -
Multicast policy
2 -
Zone
2 -
Vulnerability Management
2 -
FortiGuest
2 -
4.0MR1
1 -
FortiManager-VM
1 -
FortiCWP
1 -
Subscription Renewal Policy
1 -
Video Filter
1 -
ICAP profile
1
Top Kudoed Authors
| User | Count |
|---|---|
| 1766 | |
| 1116 | |
| 766 | |
| 447 | |
| 242 |
Broad. Integrated. Automated.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Security Research
Company
News & Articles
Copyright 2025 Fortinet, Inc. All Rights Reserved.