FortiGate IPS High or Critical Signature Detected but Allowed

Detects High or Critical FortiGate IPS events where the security action indicates that matching traffic was detected or otherwise allowed to continue rather than being blocked. The detection is intended to identify potentially malicious network activity that reached an IPS signature but was not actively prevented.

Cortex XDR