Technical Tip: "Duplicate Firewall Objects" Security Rating check Fails for Default Objects or Services

The 'Duplicate Firewall Objects' check will fail for default address objects such as 'al;l and 'FIREWALL_AUTH_PORTAL_ADDRESS', as well as for default FTP-related services like FTP, FTP_GET, and FTP_PUT due to identical configuration.

Default Address Objects:

Default FTP Services:

Security Rating Check Fail:

This issue has been resolved in v7.6.1.

Workaround: Add a comment on the objects/services showing duplicate.

GUI:
Address Object:

Services:

CLI:

config firewall address
    edit "all"
        set comment default

    end

config firewall service custom

    edit "FTP"

        set comment FTP
    next
    edit "FTP_GET"
        set comment FTP_GET
    end

Logs required by FortiGate TAC for investigation:

1. TAC Report:

execute tac report

2. Screenshots.
3. Fortinet Support Tool Data.
4. The configuration file of the FortiGate.