Fortinet Document Library

Version:

Version:


Table of Contents

Cookbook

Download PDF
Copy Link

Internet service customization

Internet Service Database (ISDB) entries can be tunes for their environments by adding custom ports and port ranges.

To add custom port range in global:
config firewall internet-service-addition
  edit 65646
      set comment "Add custom port-range:tcp/8080-8090 into 65646"
      config entry
          edit 1
              set protocol 6
              config port-range
                    edit 1
                         set start-port 8080
                         set end-port 8090
                    next
              end
          next
      end
  next
end
To execute internet-service refresh to apply the change:
 FGT-201E (65646) # end
 Warning: Configuration will only be applied after rebooting or using the 'execute internet-service refresh' command.

 FGT-201E (global) # exec internet-service refresh
 Internet Service database is refreshed.
To verify that the change was applied:
 FGT-201E (global) # diagnose internet-service info FG-traffic 6 8080 2.20.183.160
 Internet Service: 65646(Google.Gmail)

Internet service customization

Internet Service Database (ISDB) entries can be tunes for their environments by adding custom ports and port ranges.

To add custom port range in global:
config firewall internet-service-addition
  edit 65646
      set comment "Add custom port-range:tcp/8080-8090 into 65646"
      config entry
          edit 1
              set protocol 6
              config port-range
                    edit 1
                         set start-port 8080
                         set end-port 8090
                    next
              end
          next
      end
  next
end
To execute internet-service refresh to apply the change:
 FGT-201E (65646) # end
 Warning: Configuration will only be applied after rebooting or using the 'execute internet-service refresh' command.

 FGT-201E (global) # exec internet-service refresh
 Internet Service database is refreshed.
To verify that the change was applied:
 FGT-201E (global) # diagnose internet-service info FG-traffic 6 8080 2.20.183.160
 Internet Service: 65646(Google.Gmail)