FortiView sources
The FortiView Sources monitor displays top sources sorted by Bytes, Sessions or Threat Score. The information can be displayed in real time or historical views. You can use the monitor to create or edit a firewall device address or IP address definitions, quarantine hosts, and temporarily or permanently ban IPs.
To add a firewall device or IP address:
-
In the table, hover over the source or device MAC address. An information window opens.
-
Click Firewall Address > Create Firewall Device Address or Firewall Address > Create Firewall IP Address. The New Address pane opens.
-
Configure the address settings as needed, then click OK.
Use the Name field to assign a descriptive name to a device so it is easier to find it in the Device column. After you finish configuring the device, refresh the page to see the new name in the monitor.
To quarantine a host:
-
In the table, hover over the source or device MAC address. An information window opens.
-
Click Quarantine > Quarantine Host. The Quarantine Host dialog is displayed.
-
Configure the quarantine settings, then click OK.
To ban an IP address:
-
In the table, hover over the source or device MAC address. An information window opens.
-
Click Quarantine > Ban IP . The Ban IP dialog is displayed.
-
Configure the ban IP settings, then click OK.
