Skip to main content
jjdope
Staff
Staff
January 3, 2025

Troubleshooting Tip : error system external-resource; "The resource is invalid" error in install log for external threat feed config.

  • January 3, 2025
  • 0 replies
  • 689 views
Description

 

This article describes a workaround to resolve the issue where it shows the error 'error system external-resource; 'The resource is invalid' ' when trying to push a policy which has external threat feed added as source or destination.

 

Scope

 

FortiManager, FortiGate.

 

Solution

 

Create an IP Address Threat Feed on Fabric View -> External Connectors -> Create New -> IP Address Threat Feed.

The URL of the external resource which consists of the IP lists is added. 

 

Screenshot 2025-01-03 121019.png

 

This threat feed has been added as a destination in the firewall policy.

 

Screenshot 2025-01-03 121019.png

 

When pushing the configuration to the FortiGate, it threw the following error where the marked area is the URL.

 

Screenshot 2025-01-03 121019.png

 

Resolution:

  1. The DNS resolution is not there as this was an internal website.
  2. Use the internal IP address in the IP thread feed URL.

 

Screenshot 2025-01-03 121019.png