New Member

Question

Fortigate 60F - Ransomware attack

Forum|Forum|3 years ago
July 5, 2022
2 replies
1709 views

Hi,

We are using Fortigate 60F and our network was attacked by ransomware. I would like to know the timing that incident happened and the first server affected IP address detail. And also I would like to protect our network from any other further attached.

Please help.

Thank you

FortiGate

New Contributor III

Hello @bhhussain ,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Thanks,

bhhussainAuthor

New Member

Is any progress?

New Contributor III

Hello @bhhussain ,

Can you confirm if you are using FortiAnalyzer or any other logging device ?

Also, what security profiles on the policy are enabled that passes this traffic ?
Are you using deep inspection ?

Thanks,