FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This will trigger the Signature only when seeing "--pattern" 5 times per 60 seconds and from the same IP address.
Warning : In that specific case, using the option "Quarantine Attacker" is not a good action, as the Signature that triggers comes from the server IP address and would therefore quarantine the server. Use instead the logging capabilities.
Note : another switch is available, which is
"--flow from_server,reversed;
" ; in this case, even if the signature is triggered "coming from server", the "direction" will be reversed, hence the "Attacker" will
be the "Client". In this situation, only the client will be Quarantined if this action has been set.