Help
Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
mhrth
New Contributor III

Created on ‎03-25-2022 12:18 AM Edited on ‎03-25-2022 12:18 AM

Antivirus detected firewall IP address

Hello. Recently, there was a brute force attempt against RDP detected on one of our devices. However, the source IP detected comes from our firewall. Please let us know what is causing this and if there is any way for us to narrow down to the true source IP address.

Labels:
989
0 Kudos
2 REPLIES 2
sharmaj
Staff
Staff

Created on ‎03-25-2022 02:20 AM

Hi

Can you check under Antivirus logs for the same exact traffic?

Jay sharma
929
0 Kudos
Toshi_Esumi
SuperUser
SuperUser

Created on ‎03-25-2022 02:01 PM

And, make sure you don't have a VIP for RDP, which is applied to a policy that has NAT enabled.

 

Toshi

907
0 Kudos
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors
View all
Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Social Media
Security Research
Company
News & Articles
Contact Us

Copyright 2024 Fortinet, Inc. All Rights Reserved.