Adding Internet services to firewall policies (389951)
In 5.4, support was added for Internet Service objects which could be used with FortiView, Logging, Routing and WAN Load Balancing. Now they can be added to firewall policies as well.
There is an either or relationship between Internet Service objects and destination address and service combinations in firewall policies. This means that a destination address and service can be specified in the policy OR an Internet service, not both.
The related CLI options/syntax are:
config firewall policy edit 1 set internet-service 1 5 10 set internet-service-custom test set internet-service-negate [enable|disable]
In the policy listing page you will notice that is an Internet Service object is used, it will be found in both the Destination and Service column.
In the policy editing page the Destination Address, now Destination field now has two types, Address and Internet Service.
Having trouble configuring your Fortinet hardware or have some questions you need answered? Ask your questions in the comments below!!! Want someone else to deal with it for you? Get some consulting from Fortinet GURU!