How to get the report of quarantine IPs

[mukul_agra]

We have fortianalyser but not able to get the details of the IPs banned/quarantined by Fortigate on Fortianalyser. Is there any way to get the report also?

[gfleming · Accepted solution]

You should be able to see logs in FAZ for IPs that are banned if you filter on log ID 43776:

https://docs.fortinet.com/document/fortigate/7.2.2/fortios-log-message-reference/43776/43776-log-id-...

You can create a report based on these log messages.

[mukul_agra]

Yes it worked for me