Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
whang
New Contributor

How to use the Fortiguard Malware IP List in Fortigate policies?

We have a Fortigate cluster and a FortiSIEM. In the FortiSIEM, there's a 'Fortiguard Malware IP List' which is dynamically updated. How can we use this (as an External Connector) in the Fortigate to block connections to those IPs? I can't find where the FSM is getting the list.

https://omegle.onl/ vshare
2 REPLIES 2
kumarh
Staff
Staff

In Intrusion Prevention profiles, you can can Block "Scan Outgoing Connections to Botnet Sites" and enable this profile in firewall policy.

akushwaha
Staff
Staff

Hi ,
To block external Threat list via Firewall policy, please refer to the below article:
https://community.fortinet.com/t5/FortiGate/Technical-Tip-External-threat-list-threat-feed-blocked-v...

Regards,
Abhimanyu

 

Top Kudoed Authors