Client Reaches Malicious Web Page Directing Them To "Microsoft Tech Support" - Unneeded

[SecurityPlus]

The most common issue we encounter is a client getting on a web page claiming that they have a virus, must call a number, pay them money, etc. We use FortiGate firewalls with UTP bundle. We have most of the Security Profiles within the Policies turned on and set to seemingly reasonable settings. Are there one or more setting issues that we can check to assure we have set correctly to reduce the risk of users getting to these malicious pages? Or are these large unstoppable even with good firewall settings? I will be off-line from the forum on Sunday.

[suketha]

I'll check it out. My worst "malware" horror story was when we had to beta test McAfee EPO at my company. Oh the inhumanity! So glad we were able to convince management to not go with that solution. It was not a pleasant testing experience.

[mpeddalla]

Hello @SecurityPlus  ,

Thank you for contacting the Fortinet Forum portal.

I recommend ensuring the article suggestions are configured to avoid malicious site visits.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Blocking-Potential-threats-over-Internet-s...

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-block-malicious-web-sites/ta-p/1941....

-Alongside having antivirus and IPS security profiles enabled to protect any malicious download or link redirecting.

Best regards,

Manasa.

If you feel the above steps helped resolve the issue, mark the reply as solved so that other customers can get it easily while searching for similar scenarios.