Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
vvserpent
New Contributor II

IPS Quarantine Attackers

Hi, I have a 1240B running 4.0 software and I have configured a IPS signature to quarantine attacker IP for 5 minutes. It works! I have checked the GUI and don' t know how to check what IP address has been blocked. Could you tell me how to check what IP has been blocked by the IPS ? Regards, Jacky
4 REPLIES 4
vvserpent
New Contributor II

Hi, I just found that I can obtain the banned user list under " User->Monitor->Banned User" Regards, Jacky
Dipen
New Contributor III

Thanks for the Update !! Is the list Refreshed automatically ? If yes what is the interval ?

Ahead of the Threat. FCNSA v5 / FCNSP v5

Fortigate 1000C / 1000D / 1500D

 

Ahead of the Threat. FCNSA v5 / FCNSP v5 Fortigate 1000C / 1000D / 1500D
vvserpent
New Contributor II

Yes, The Banned User IP will removed once " quarantine" period expired.
sarif
New Contributor II

HI vvserpent... can you describe how to configured a IPS signature to quarantine attacker IP for 5 minutes? because the default is 1 year.
Labels
Top Kudoed Authors