Description
Solution
This article explains how to add Internet services to firewall policies
Solution
In FortiOS v5.4, support was added for Internet Service objects which could be used with FortiView, Logging, Routing and WAN Load Balancing. In FortiOS v5.6 they can now be added to firewall policies as well.
CLI
The related CLI options/syntax are:
GUI
In the policy listing page an Internet Service object is used, it will be found in both the Destination and Service column.
In the policy editing page the Destination Address now has two types: Address and Internet Service.
There is an either/or relationship between Internet Service objects and destination address and service combinations in firewall policies. This means that a destination address and service can be specified in the policy OR an Internet service, not both.
CLI
The related CLI options/syntax are:
config firewall policy
edit 1
set internet-service 1 5 10
set internet-service-custom test
set internet-service-negate [enable|disable]
end
GUI
In the policy listing page an Internet Service object is used, it will be found in both the Destination and Service column.
In the policy editing page the Destination Address now has two types: Address and Internet Service.
There is an either/or relationship between Internet Service objects and destination address and service combinations in firewall policies. This means that a destination address and service can be specified in the policy OR an Internet service, not both.
