Hello
I have Fortigate 60E with firmware 6.2.0.
I 'm suffering some troubles with application control and industrial signatures when they are been logged.
I have configured one profile to avoid all the communications expect the modbus protocol and specifically read_coils and read_holding_registers.
When I try with some request i could see several log entries for registers (request and replay) but a few more for coils.
In the green boxes are the request (coils, registers and discrete_inputs that are blocked).
Orange boxes are the responses and with the red arrows are the duplicated log entries.
Why is fortigate loggin multiple times the same entry?? is a worng configuration issue or is normal?
Thanks
Here is the application control profile configuration:
Here is the
