Internet Service Customization
This version introduces new flexibility to tune Internet Service DB (ISDB) entries for their environments. A new CLI option allows the admin to add custom port and port ranges into their predefined ISDB entries.
Use the new CLI config firewall internet-service-addition
command in system global
to tune ISDB for your environment.
To add custom port range in global:
config firewall internet-service-addition edit 65646 set comment "Add custom port-range:tcp/8080-8090 into 65646" config entry edit 1 set protocol 6 config port-range edit 1 set start-port 8080 set end-port 8090 next end next end next end
To execute internet-service refresh to apply the change:
FGT-201E (65646) # end Warning: Configuration will only be applied after rebooting or using the 'execute internet-service refresh' command. FGT-201E (global) # exec internet-service refresh Internet Service database is refreshed.
To verify that the change was applied:
FGT-201E (global) # diagnose internet-service info FG-traffic 6 8080 2.20.183.160 Internet Service: 65646(Google.Gmail) FGT-201E (global) #