Testing IP reputation filtering on a FortiGate 2200E, I managed to get it working alright. My finding being, that packets that didn't meet the specified reputation level will fall through and hit the implicit deny or, in case of, a lower level explicit deny rule (instead of a direct drop).
The only thing I find missing, is a simple log entry indicating that IP reputation has been triggered. Does anyone know if an IP reputation trigger even produces a log entry? Any help is much appreciated!
You should see a dstreputation field in the traffic logs.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1751 | |
1114 | |
766 | |
447 | |
241 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.