Fortigate 60F - Ransomware attack

[bhhussain]

Hi,

We are using Fortigate 60F and our network was attacked by ransomware. I would like to know the timing that incident happened and the first server affected IP address detail. And also I would like to protect our network from any other further attached.

Please help.

Thank you

[Anonymous]

Hello @bhhussain ,

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Thanks,

[bhhussain]

Is any progress?

[Anonymous]

Hello @bhhussain ,

Can you confirm if you are using FortiAnalyzer or any other logging device ?

Also, what security profiles on the policy are enabled  that passes this traffic ?
Are you using deep inspection ?

Thanks,