Source ip reputation in traffic logs?

[bmaster]

When looking at the forward traffic logs (for incoming connections), I see that some sources are from "known malicious sites" when I hover over the source IP. But when I add the column "source reputation", it's always empty. 

I'd like to ad some reputation filtering, but it would be nice to be able to see the reputation for each log line first, without having to hover over each line. Is there a way to show the source reputation in the table?

[AEK · Accepted solution]

I'm not sure but I guess this log field may be added once you use firewall policy params reputation-minimum & reputation-direction.

Here is how you use them. I think it's worth trying.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-IP-reputation-in-policies-and-fallthrough/...

[bmaster]

Seems like this is indeed the case. Thanks for the thip.