FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
gakshay
Staff
Staff
Article Id 198730

Description
This article describes how to display the Iprope table for an application signature ID.

Solution
Follow the below syntax to view the Iprope table associated with any signature ID.

# get firewall iprope appctrl list | grep -f <application id>

For example, 31077 is the application ID for Youtube access.

To check the same over CLI, execute the below command:

# get firewall iprope appctrl list | grep -f 31077
  app-id=31077      list-id=2000  action=Pass      <-----
  app-id=31077      list-id=2001  action=Pass      <-----
  app-id=31077      list-id=2002  action=Pass      <-----
  app-id=31077      list-id=2003  action=Pass      <-----
  app-id=31077      list-id=2004  action=Pass      <-----
  app-id=31077      list-id=2005  action=Block        <-----

From the example, the Youtube application is blocked in one of the application control profiles and allowed for other profiles.

Contributors