FortiBleed Related Fortinet SSL VPN Brute Force and Followed Success Check

Tun Tun Naing@tuntun

•updated Jun 25, 2026•11•0•17

Detects FortiBleed related credential abuse activity against Fortinet SSL VPN by identifying high volume failed login attempts or password spraying from the same source IP. The rule also checks whether the same source IP later had a successful SSL VPN login