FTP Command Restriction

Last updated on:

Applies to: Log360Log360 Cloud

About the rule

Rule Type

Standard

Rule Description

This rule detects FTP commands that are restricted by the configured policy (e.g., PUT, DELETE).

Severity

Trouble

Rule Requirement

Criteria

Action1: actionname = "FTP Command Restriction" select Action1.HOSTNAME,Action1.IDS_NAME,Action1.EVENTID,Action1.DEST_IP,Action1.DEST_PORT,Action1.MESSAGE,Action1.SOURCE_IP,Action1.STATUS

Detection

Execution Mode

realtime

Log Sources

Fortinet