0

We have a small case of security breach in one of our sites, we have a contractor that is suppose to stay out of our firewall Fortinet, today i noticed these two paragraphs that look fishy. My site network administrator bailed on us few months ago and i am trying to wrap my head around these paragraphs without the need of paying someone to do it. I need your help experts!

> edit "Mycompany_to_Contractor"
>         set vdom "root"
>         set type tunnel
>         set snmp-index 6
>         set interface "wan1"
>     next
>     edit "Mycompany to Contractor2"
>         set vdom "root"
>         set type tunnel
>         set snmp-index 8
>         set interface "wan1"
>     next

Any explanation would be appreciated!

Thank you

closed as too broad by Ron Maupin Dec 7 '18 at 4:38

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

1

Assuming the edit "Mycompany... is located under config system interface, this probably indicates a VPN tunnel.

Without more context it isn't possible to say if it's actually functional.

Check whether there are corresponding entries under config vpn ipsec phase1-interface and config firewall policy.

Using the GUI it should be much easier to figure out what's behind the entries.

Not the answer you're looking for? Browse other questions tagged or ask your own question.