Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
michio42
New Contributor

Increased VPN attacks

Anyone else noticing a massive increase in credential spray attacks on your VPN connections as of the last week or two? We've always had the occasional scans and automated attempts, but lately our SSL-VPN ports are getting hit non-stop with bad login attempts from all over the world. Setting the SSL-VPN host settings to only accept connections from a few required countries cut down on the noise a ton, but still seeing lots of attempts. Checked the logs on my gate at home and am seeing the same thing there.

10.0.0.0.1 192.168.1.254
2 REPLIES 2
Anthony_E
Community Manager
Community Manager

Hello michio42,

 

Thank you for using the Community Forum.

I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

 

Regards,

Anthony-Fortinet Community Team.
Anthony_E
Community Manager
Community Manager

Hello michio42,

 

I could read that indeed, there is an increase in credential spray attacks on VPN connections.

 

The piece of advice I could get, is to Geo block.

 

Regards,

Anthony-Fortinet Community Team.
Labels
Top Kudoed Authors