FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
axel_gonzalez_FTNT
Article Id 194664
Description
To configure an explicit proxy firewall policy:

See the following error 'Entry not found'.


Try to create the policy using CLI:

# config firewall explicit-proxy-policy
    edit
        set uuid 5fe08756-0e1d-51e7-225b-24447f910a2fc
        set proxy ftp
        set dstintf "port1"
        set srcaddr "all"
        set dstaddr "all"
        set action accept
        set schedule "always"
    next
end
        set proxy web
    end
Attribute 'service' MUST be set.
Command fail. Return Code -56


Solution
This error can appear because there is no 'web proxy' service defined:

Configure through CLI the next command:

# config firewall service custom
    edit "webproxy"
        set explicit-proxy enable
        set category "Web Proxy"
        set protocol ALL
        set comment ''
        set color 0
        set visibility enable
        set iprange 0.0.0.0
        set fqdn ''
        set tcp-portrange 0-65535:0-65535
    next
end

Now, policy can be created without any problem.


Contributors