These are trap based alarms from the device.
The trap is a Fortinet specific trap, fnTrapIpsAnomaly (18.104.22.168.4.1.12356.0.504).
Looking at the vendor MIB there really isn't much to go on here. The Trap description reads "An IPS anomaly has been detected". It passes the following variables:
- fnSysSerial (22.214.171.124.4.1.12356.1.2)
- sysName (126.96.36.199.188.8.131.52)
- fnIpsTrapSigId (184.108.40.206.4.1.12356.16.1)
- fnIpsTrapSrcIp (220.127.116.11.4.1.12356.16.2 )
This trap is mapped out of the box in Spectrum. The Probable Cause associated with this alarm states the following:IPS SIGNATURE DETECTEDSYMPTOMS:An 'fnTrapIpsAnomaly' trap was received from the device.PROBABLE CAUSES:An IPS anomaly has been detected.RECOMMENDED ACTIONS:1) Refer to the Event Message associated with this alarm for additional details that the device may have provided about the cause of this condition.2) Review the Events associated with this model that occurred in the same time frame as this alarm in order to gain insight into the device's state. These can be viewed from the Events tab in OneClick.
It is recommend you giving this over to the Network Admin and let them determine the cause and address the issue.