Technical Tip: Impact on Policy Package status when creating or modifying Custom Internet Services or Custom Internet Service Groups on FortiManager
| Description | This article describes the issue when a custom internet service or internet service group is created on FortiManager, the policy package status will change to 'modified'. And it will affect all VDOMs if multiple VDOMs are in use on FortiGate.
 |
| Scope | FortiManager. |
| Solution | This is expected behavior. Custom internet services must be installed across all VDOMs, whether they are used in any policy package or not.
Any modifications to a custom internet service, including changes to address objects or address groups referenced within it, will mark the policy package status as well. This requires reinstallation of the affected policy packages to make them in sync again.   
Note: Custom Internet Services will be imported from FortiGate even if they are not referenced in any policy. |