Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Fortinet white logo
Fortinet docs logo DOCUMENT LIBRARY
Products Best Practices Hardware Guides Products A-Z
Summary
By Solution
By 4D Pillars
By Cloud
Secure Networking
Unified SASE
Security Operations
Secure SD-WAN
Secure Access Service Edge (SASE)
ZTNA
LAN Edge
Identity and Access Management
Next Generation Firewall
Public Cloud
Private Cloud
FortiCloud
Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
    • More >>
    Unified SASE
  • Single Vendor SASE
  • Cloud Network Security
  • Secure Endpoint Connectivity
  • Web Application / API Protection
    • More >>
    Security Operations
  • Security Operations Automation
  • Identity
  • Early Detection & Prevention
    • More >>
    Secure Networking
  • Hybrid Mesh Firewall
  • NOC Management
  • LAN
  • WAN
  • Communication & Surveillance
    • Unified SASE
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Cloud Network Security
  • Cloud-Native Security
  • Web Application / API Protection
    • Security Operations
  • Security Operations Automation
  • Endpoint
  • Data Protection
  • Identity
  • Email
  • Early Detection & Prevention
  • Expert Services
  • Edge Firewall
  • Orchestration & management
  • SD Branch
  • Application Delivery
  • Single Vendor SASE
  • Secure Endpoint Connectivity
  • Secure Private Access
  • Thin Edge
  • Identity
  • Application Gateway
  • Enterprise Asset Management
  • Endpoint Agent
  • Agentless Security Posture
  • Identity
  • Wireless
  • Switching
  • Identity
  • Privilege Acccess Management
  • Next Generation Firewall
  • Orchestration & management
  • Expert Services
  • All
  • All
  • Account Management
  • SAAS Management
  • SAAS Application Security
  • Managed Services
  • Platform as a service (PAAS)
  • Other SAAS Services
    • 4D Resources
    Solution Hubs
  • 4D Pillars
  • Cloud
  • Popular Solutions

    • CLI Reference

    Home FortiProxy 7.2.5 CLI Reference
    7.2.5
    7.6.0
    7.4.6
    7.4.5
    7.4.4
    7.4.3
    7.4.2
    7.4.1
    7.4.0
    7.2.12
    7.2.11
    7.2.10
    7.2.9
    7.2.8
    7.2.7
    7.2.6
    7.2.5
    7.2.4
    7.2.3
    7.2.2
    7.2.1
    7.0.19
    7.0.18
    7.0.17
    7.0.15
    7.0.14
    7.0.13
    7.0.12
    7.0.11
    7.0.10
    7.0.9
    7.0.8
    7.0.7
    2.0.13
    2.0.12
    2.0.0
    1.2.4

    config firewall service custom

    config firewall service custom

    Configure custom services.

    config firewall service custom
    Description: Configure custom services.
    edit <name>
        set proxy [enable|disable]
        set category {string}
        set protocol [TCP/UDP/SCTP|ICMP|...]
        set iprange {user}
        set fqdn {string}
        set protocol-number {integer}
        set icmptype {integer}
        set icmpcode {integer}
        set tcp-portrange {user}
        set udp-portrange {user}
        set sctp-portrange {user}
        set tcp-halfclose-timer {integer}
        set tcp-halfopen-timer {integer}
        set tcp-timewait-timer {integer}
        set tcp-rst-timer {integer}
        set udp-idle-timer {integer}
        set session-ttl {user}
        set check-reset-range [disable|strict|...]
        set comment {var-string}
        set color {integer}
        set visibility [enable|disable]
        set app-service-type [disable|app-id|...]
        set app-category <id1>, <id2>, ...
        set application <id1>, <id2>, ...
        set fabric-object [enable|disable]
    next
end

    config firewall service custom

    Parameter

    Description

    Type

    Size

    Default

    name

    Custom service name.

    string

    Maximum length: 79

    proxy

    Enable/disable web proxy service.

    option

    -

    disable

    Option

    Description

    enable

    Enable setting.

    disable

    Disable setting.

    category

    Service category.

    string

    Maximum length: 63

    protocol

    Protocol type based on IANA numbers.

    option

    -

    TCP/UDP/SCTP

    Option

    Description

    TCP/UDP/SCTP

    TCP, UDP and SCTP.

    ICMP

    ICMP.

    ICMP6

    ICMP6.

    IP

    IP.

    HTTP

    HTTP - for web proxy.

    FTP

    FTP - for web proxy.

    CONNECT

    Connect - for web proxy.

    SOCKS-TCP

    Socks TCP - for web proxy.

    SOCKS-UDP

    Socks UDP - for web proxy.

    ALL

    All - for web proxy.

    iprange

    Start and end of the IP range associated with service.

    user

    Not Specified

    fqdn

    Fully qualified domain name.

    string

    Maximum length: 255

    protocol-number

    IP protocol number.

    integer

    Minimum value: 0 Maximum value: 254

    0

    icmptype

    ICMP type.

    integer

    Minimum value: 0 Maximum value: 4294967295

    icmpcode

    ICMP code.

    integer

    Minimum value: 0 Maximum value: 255

    tcp-portrange

    Multiple TCP port ranges.

    user

    Not Specified

    udp-portrange

    Multiple UDP port ranges.

    user

    Not Specified

    sctp-portrange

    Multiple SCTP port ranges.

    user

    Not Specified

    tcp-halfclose-timer

    Wait time to close a TCP session waiting for an unanswered FIN packet.

    integer

    Minimum value: 0 Maximum value: 86400

    0

    tcp-halfopen-timer

    Wait time to close a TCP session waiting for an unanswered open session packet.

    integer

    Minimum value: 0 Maximum value: 86400

    0

    tcp-timewait-timer

    Set the length of the TCP TIME-WAIT state in seconds.

    integer

    Minimum value: 0 Maximum value: 300

    0

    tcp-rst-timer

    Set the length of the TCP CLOSE state in seconds.

    integer

    Minimum value: 5 Maximum value: 300

    0

    udp-idle-timer

    UDP half close timeout.

    integer

    Minimum value: 0 Maximum value: 86400

    0

    session-ttl

    Session TTL.

    user

    Not Specified

    check-reset-range

    Configure the type of ICMP error message verification.

    option

    -

    default

    Option

    Description

    disable

    Disable RST range check.

    strict

    Check RST range strictly.

    default

    Using system default setting.

    comment

    Comment.

    var-string

    Maximum length: 255

    color

    Color of icon on the GUI.

    integer

    Minimum value: 0 Maximum value: 32

    0

    visibility

    Enable/disable the visibility of the service on the GUI.

    option

    -

    enable

    Option

    Description

    enable

    Show in service selection.

    disable

    Hide from service selection.

    app-service-type

    Application service type.

    option

    -

    disable

    Option

    Description

    disable

    Disable application type.

    app-id

    Application ID.

    app-category

    Applicatin category.

    app-category <id>

    Application category ID.

    Application category id.

    integer

    Minimum value: 0 Maximum value: 4294967295

    application <id>

    Application ID.

    Application id.

    integer

    Minimum value: 0 Maximum value: 4294967295

    fabric-object

    Security Fabric global object setting.

    option

    -

    disable

    Option

    Description

    enable

    Object is set as a security fabric-wide global object.

    disable

    Object is local to this security fabric member.
    Previous
    Next

    config firewall service custom

    config firewall service custom

    Configure custom services.

    config firewall service custom
    Description: Configure custom services.
    edit <name>
        set proxy [enable|disable]
        set category {string}
        set protocol [TCP/UDP/SCTP|ICMP|...]
        set iprange {user}
        set fqdn {string}
        set protocol-number {integer}
        set icmptype {integer}
        set icmpcode {integer}
        set tcp-portrange {user}
        set udp-portrange {user}
        set sctp-portrange {user}
        set tcp-halfclose-timer {integer}
        set tcp-halfopen-timer {integer}
        set tcp-timewait-timer {integer}
        set tcp-rst-timer {integer}
        set udp-idle-timer {integer}
        set session-ttl {user}
        set check-reset-range [disable|strict|...]
        set comment {var-string}
        set color {integer}
        set visibility [enable|disable]
        set app-service-type [disable|app-id|...]
        set app-category <id1>, <id2>, ...
        set application <id1>, <id2>, ...
        set fabric-object [enable|disable]
    next
end

    config firewall service custom

    Parameter

    Description

    Type

    Size

    Default

    name

    Custom service name.

    string

    Maximum length: 79

    proxy

    Enable/disable web proxy service.

    option

    -

    disable

    Option

    Description

    enable

    Enable setting.

    disable

    Disable setting.

    category

    Service category.

    string

    Maximum length: 63

    protocol

    Protocol type based on IANA numbers.

    option

    -

    TCP/UDP/SCTP

    Option

    Description

    TCP/UDP/SCTP

    TCP, UDP and SCTP.

    ICMP

    ICMP.

    ICMP6

    ICMP6.

    IP

    IP.

    HTTP

    HTTP - for web proxy.

    FTP

    FTP - for web proxy.

    CONNECT

    Connect - for web proxy.

    SOCKS-TCP

    Socks TCP - for web proxy.

    SOCKS-UDP

    Socks UDP - for web proxy.

    ALL

    All - for web proxy.

    iprange

    Start and end of the IP range associated with service.

    user

    Not Specified

    fqdn

    Fully qualified domain name.

    string

    Maximum length: 255

    protocol-number

    IP protocol number.

    integer

    Minimum value: 0 Maximum value: 254

    0

    icmptype

    ICMP type.

    integer

    Minimum value: 0 Maximum value: 4294967295

    icmpcode

    ICMP code.

    integer

    Minimum value: 0 Maximum value: 255

    tcp-portrange

    Multiple TCP port ranges.

    user

    Not Specified

    udp-portrange

    Multiple UDP port ranges.

    user

    Not Specified

    sctp-portrange

    Multiple SCTP port ranges.

    user

    Not Specified

    tcp-halfclose-timer

    Wait time to close a TCP session waiting for an unanswered FIN packet.

    integer

    Minimum value: 0 Maximum value: 86400

    0

    tcp-halfopen-timer

    Wait time to close a TCP session waiting for an unanswered open session packet.

    integer

    Minimum value: 0 Maximum value: 86400

    0

    tcp-timewait-timer

    Set the length of the TCP TIME-WAIT state in seconds.

    integer

    Minimum value: 0 Maximum value: 300

    0

    tcp-rst-timer

    Set the length of the TCP CLOSE state in seconds.

    integer

    Minimum value: 5 Maximum value: 300

    0

    udp-idle-timer

    UDP half close timeout.

    integer

    Minimum value: 0 Maximum value: 86400

    0

    session-ttl

    Session TTL.

    user

    Not Specified

    check-reset-range

    Configure the type of ICMP error message verification.

    option

    -

    default

    Option

    Description

    disable

    Disable RST range check.

    strict

    Check RST range strictly.

    default

    Using system default setting.

    comment

    Comment.

    var-string

    Maximum length: 255

    color

    Color of icon on the GUI.

    integer

    Minimum value: 0 Maximum value: 32

    0

    visibility

    Enable/disable the visibility of the service on the GUI.

    option

    -

    enable

    Option

    Description

    enable

    Show in service selection.

    disable

    Hide from service selection.

    app-service-type

    Application service type.

    option

    -

    disable

    Option

    Description

    disable

    Disable application type.

    app-id

    Application ID.

    app-category

    Applicatin category.

    app-category <id>

    Application category ID.

    Application category id.

    integer

    Minimum value: 0 Maximum value: 4294967295

    application <id>

    Application ID.

    Application id.

    integer

    Minimum value: 0 Maximum value: 4294967295

    fabric-object

    Security Fabric global object setting.

    option

    -

    disable

    Option

    Description

    enable

    Object is set as a security fabric-wide global object.

    disable

    Object is local to this security fabric member.
    Previous
    Next