Any option to block IPSec intentions

[RolandBaumgaertner72]

Hello,

for some weeks now we get everyday logs about IPSec connection intentions from the same subnet. Like 2-3 weeks ago we also had them on the other firewall but since one week we only get them at the central firewall.

In the logs we always get scan-39c.shadowserver.org and from the 64.62.197.x. Anything we can do about it?

Thanks!

[aahmadzada]

Hi, That can be blocked by a local in policy

https://docs.fortinet.com/document/fortigate/6.2.11/cookbook/201046/blocking-unwanted-ike-negotiatio...