Block and log portscanning

[joh]

Hello

our ip was banned for portscanning activity. So i need to know how can i stop this service from our lan and how can i set a log to see the pc that have this problem

I have se log to "memory" and Event logging "ALL" , Local Traffic Log "ALL" but i don't see anything

Thanks

[ozkanaltas]

Hello @joh ,

You should review Forward Traffic logs. Because all traffic passing through the FortiGate is recorded here.

[joh]

Hello. Thanks for your help. In the menu foward traffic i dont' see anything. It's completely empty. How can i activate it?

[drakenhu1]

I stopped most of mine by blocking everything from out of the country from accessing my firewall IP address. I run a few websites so I don't want to block everything, but my sites are locality-centric so anyone not local wouldn't really be accessing them. But blocking China, Russia and a few of the other big hitters has almost eliminated this.