Unapproved Login Location

Description

Unapproved Login Location policy monitors for logins from block listed country.

Policy Configuration

Follow the steps below to enable and configure the policy

1. Click on any Cloud Account drop down menu from FortiCASB dashboard, e.g. Salesforce, Office365, etc.
2. Click on Policy drop down menu and select Threat Protection.
3. Locate Unapproved Login Location and click on the right arrow key > button to expand the policy.
4. Click on General tab, click Status toggle switch button to enable the policy.



5. Click on Severity level drop down menu to select the severity level (Critical, Alert, Warning, Information).
6. Click Context tab to configure settings.



7. Click Select Country drop down menu to select a county for Unapproved Location List. This will generate an alert whenever there is a login attempt from the block listed country. Click Add to finish adding the country. Repeat this step to add more countries if needed.
8. Click Save to update the configuration.

After the policy is enabled and configured, whenever an unidentified user login from the block listed location, an alert will be triggered in the alert page. For more details, please refer to Alert.