Rule Info
Name
FortiGate - New VPN SSL Web Portal Added
Author
Marco Pedrinazzi @pedrinazziM (InTheCyber)
Description
Detects the addition of a VPN SSL Web Portal on a Fortinet FortiGate Firewall.
This behavior was observed in pair with modification of VPN SSL settings.
Date
2025-11-01 00:00:00
Modified
None
Id
2bfb6216-0c31-4d20-8501-2629b29a3fa2
Tags
attack.persistence attack.initial-access attack.t1133
Type
Community Rule
Link to Public Repo
Rule History
Author
Title
Date
Commit
Scan your endpoints, forensic images or collected files with our portable scanner THOR