Troubleshooting Tip: Solving the error of invalid dst-port range

From FortiGate v7.4, it's allowed to configure the destination port for the Central SNAT table. 

When configuring the Central SNAT from FortiManager, if a protocol is defined in the firewall central SNAT map configuration, but no destination port is specified (as shown in the example below).

config firewall central-snat-map   edit x     set protocol 6     set dst-port    next end

An error will appear when pushing the policy from FortiManager to FortiGate:

To resolve this issue, create a script to unset the protocol and run the script on the Policy Package or ADOM database.

config firewall central-snat-map   edit x     unset protocol   next end

After running the script, the change is applied to the Policy Package/ADOM database.

Run the install wizard again, and the policy will be successfully pushed to the FortiGate.