Skip to main content
rbarnes
Staff
Staff
May 20, 2024

Technical Tip: External resource with Virtual Domains

  • May 20, 2024
  • 0 replies
  • 840 views
Description

This article describes how to source an external resource (also known as a threat feed connector).

Scope Fortios 7.0,7.2.7.4
Solution

It is not possible to source an external resource through the local VDOM. It can only be sourced from the root VDOM.

 

VDOM FG-traffic:

 

Threat feed configured.

Internet access on this VDOM.

 

VDOM root:

 

Management VDOM.

No internet access on this VDOM.

 

VDOMS:

 

externalresourceimage.png

 

Error message:

 

externalresourceFG-traffic.png

 

Create a working setup as follows:

 

  1. Create a loopback interface on the root VDOM and set up an IP address on it.

external resource rootimage.png

 

 

  1. Create a loopback interface on the Fg-traffic VDOM and set the same IP address on it.

 

externalresourcefgtrafficimg.png

 

  1. Set the source IP address.

external resource kb.png

 

It will now be sourced from the loopback address on the FG-traffic VDOM.

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT