Fortinet white logo
Fortinet white logo

CLI Reference

config firewall internet-service-custom

config firewall internet-service-custom

Configure custom Internet Services.

config firewall internet-service-custom
    Description: Configure custom Internet Services.
    edit <name>
        set comment {var-string}
        config entry
            Description: Entries added to the Internet Service database and custom database.
            edit <id>
                set addr-mode [ipv4|ipv6]
                set dst <name1>, <name2>, ...
                set dst6 <name1>, <name2>, ...
                config port-range
                    Description: Port ranges in the custom entry.
                    edit <id>
                        set end-port {integer}
                        set start-port {integer}
                    next
                end
                set protocol {integer}
            next
        end
        set fabric-force-sync [enable|disable]
        set fabric-object [enable|disable]
        set fabric-object-source [member|local|...]
        set reputation {integer}
        set uuid {uuid}
    next
end

config firewall internet-service-custom

Parameter

Description

Type

Size

Default

comment

Comment.

var-string

Maximum length: 255

fabric-force-sync *

Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped.

option

-

disable

Option

Description

enable

Enable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices.

disable

Disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices.

fabric-object *

Security Fabric global object setting.

option

-

disable

Option

Description

enable

Object is set as a security fabric-wide global object.

disable

Object is local to this security fabric member.

fabric-object-source *

Source of truth for fabric object.

option

-

root

Option

Description

member

Source of truth for this object is a non-root member of fabric.

local

Source of truth for this object is this security fabric member.

root

Source of truth for this object is the root of the fabric.

name

Internet Service name.

string

Maximum length: 63

reputation

Reputation level of the custom Internet Service.

integer

Minimum value: 0 Maximum value: 4294967295

3

uuid *

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

* This parameter may not exist in some models.

config entry

Parameter

Description

Type

Size

Default

addr-mode

Address mode (IPv4 or IPv6).

option

-

ipv4

Option

Description

ipv4

IPv4 mode.

ipv6

IPv6 mode.

dst <name>

Destination address or address group name.

Select the destination address or address group object from available options.

string

Maximum length: 79

dst6 <name>

Destination address6 or address6 group name.

Select the destination address6 or address group object from available options.

string

Maximum length: 79

id

Entry ID(1-255).

integer

Minimum value: 0 Maximum value: 255

0

protocol

Integer value for the protocol type as defined by IANA (0 - 255).

integer

Minimum value: 0 Maximum value: 255

0

config port-range

Parameter

Description

Type

Size

Default

end-port

Integer value for ending TCP/UDP/SCTP destination port in range (0 to 65535).

integer

Minimum value: 0 Maximum value: 65535

65535

id

Custom entry port range ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

start-port

Integer value for starting TCP/UDP/SCTP destination port in range (0 to 65535).

integer

Minimum value: 0 Maximum value: 65535

1

config firewall internet-service-custom

config firewall internet-service-custom

Configure custom Internet Services.

config firewall internet-service-custom
    Description: Configure custom Internet Services.
    edit <name>
        set comment {var-string}
        config entry
            Description: Entries added to the Internet Service database and custom database.
            edit <id>
                set addr-mode [ipv4|ipv6]
                set dst <name1>, <name2>, ...
                set dst6 <name1>, <name2>, ...
                config port-range
                    Description: Port ranges in the custom entry.
                    edit <id>
                        set end-port {integer}
                        set start-port {integer}
                    next
                end
                set protocol {integer}
            next
        end
        set fabric-force-sync [enable|disable]
        set fabric-object [enable|disable]
        set fabric-object-source [member|local|...]
        set reputation {integer}
        set uuid {uuid}
    next
end

config firewall internet-service-custom

Parameter

Description

Type

Size

Default

comment

Comment.

var-string

Maximum length: 255

fabric-force-sync *

Enable/disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices. Configuration conflict check is skipped.

option

-

disable

Option

Description

enable

Enable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices.

disable

Disable forced synchronization of configuration objects from the root FortiGate unit to the downstream devices.

fabric-object *

Security Fabric global object setting.

option

-

disable

Option

Description

enable

Object is set as a security fabric-wide global object.

disable

Object is local to this security fabric member.

fabric-object-source *

Source of truth for fabric object.

option

-

root

Option

Description

member

Source of truth for this object is a non-root member of fabric.

local

Source of truth for this object is this security fabric member.

root

Source of truth for this object is the root of the fabric.

name

Internet Service name.

string

Maximum length: 63

reputation

Reputation level of the custom Internet Service.

integer

Minimum value: 0 Maximum value: 4294967295

3

uuid *

Universally Unique Identifier (UUID; automatically assigned but can be manually reset).

uuid

Not Specified

00000000-0000-0000-0000-000000000000

* This parameter may not exist in some models.

config entry

Parameter

Description

Type

Size

Default

addr-mode

Address mode (IPv4 or IPv6).

option

-

ipv4

Option

Description

ipv4

IPv4 mode.

ipv6

IPv6 mode.

dst <name>

Destination address or address group name.

Select the destination address or address group object from available options.

string

Maximum length: 79

dst6 <name>

Destination address6 or address6 group name.

Select the destination address6 or address group object from available options.

string

Maximum length: 79

id

Entry ID(1-255).

integer

Minimum value: 0 Maximum value: 255

0

protocol

Integer value for the protocol type as defined by IANA (0 - 255).

integer

Minimum value: 0 Maximum value: 255

0

config port-range

Parameter

Description

Type

Size

Default

end-port

Integer value for ending TCP/UDP/SCTP destination port in range (0 to 65535).

integer

Minimum value: 0 Maximum value: 65535

65535

id

Custom entry port range ID.

integer

Minimum value: 0 Maximum value: 4294967295

0

start-port

Integer value for starting TCP/UDP/SCTP destination port in range (0 to 65535).

integer

Minimum value: 0 Maximum value: 65535

1