DNS blocked

[gmab]

I have a fortigate 60F and sometimes i have block dns connection.

The connection is blocked by aplication control wich detects a network service and blocks it,but in aplication control network services are allowed.

As i was saying somentimes in logs a get a block message somentimes i get an allow message.I also made in dns a whitecard for that dns.

[jintrah_FTNT]

Hi,

Please attach the blocked log details as well for reference.

Best regards,

Jin

[hbac]

Hi @gmab,

Do you have any other security profiles enabled? If yes, can you check security event logs of those profiles? 

Regards, 

[gmab]

Hello ,Yes i have another policies enabled.Where can i see the log for each policy?

[Quint021]

Hello @gmab,

From the left-hand menu on the GUI, navigate to Log & Report --> Security Events where the logs for each security profile should be visible per category. You can then apply filters in each category to trace the incident.

Reference: https://docs.fortinet.com/document/fortigate/7.4.4/administration-guide/876272/security-events-log-p...

Kind Regards,

[gmab]

Thank you.