Multiple log entrys

[jeskudero]

Hello

I have Fortigate 60E with firmware 6.2.0.

I 'm suffering some troubles with application control and industrial signatures when they are been logged.

I have configured one profile to avoid all the communications expect the modbus protocol and specifically read_coils and read_holding_registers.

When I try with some request i could see several log entries for registers (request and replay) but a few more for coils.

In the green boxes are the request (coils, registers and discrete_inputs that are blocked).

Orange boxes are the responses and with the red arrows are the duplicated log entries.

Why is fortigate loggin multiple times the same entry?? is a worng configuration issue or is normal?

Thanks

[jeskudero]

Here is the application control profile configuration:

Here is the