Can I write comments in txt file for Threat Feed?

Forum|Forum|3 years ago
September 2, 2022
2 replies
7170 views

Hello,

I made a txt file for Threat Feed as below

I wrote '#" for comment

Paloalto can ignore some characters like '#' and recognize comment.

Howerver Fortinet can't ignore "#" and then recognize invalid.

Can you let me know how to use comment?

FortiGate v5.4

Best answer by amouawad

If this is a threat feed that you're making you could redesign it a little by placing the comments above the IP address. For example:

#blocked IP 1

1.1.1.1

#blocked IP 2

2.2.2.2

The FortiGate will parse the two IP addresses and ignore the lines with #.

A

Anonymous_User

Contributor III

Dear Kiclee.

I understand that you are using an external threat feed,
So may I know whether "View entries" is not showing the "#" ?

kicleeAuthor

Explorer

Dear akumarr,

No, "view entires" is showing "#" as below

Shilpa1

Staff

Hello kiclee,

Please be advised that for IP addresses, only the below formats listed under Example, are considered valid.

IP Address

The file contains one IP/IP range/subnet per line. It is available as an External IP Block List in DNS Filter profiles, and as a Source/Destination in IPv4, IPv6, and proxy policies.

Example:

192.168.2.100 172.200.1.4/16 172.16.1.2/24 172.16.8.1-172.16.8.100 2001:0db8::eade:27ff:fe04:9a01/120 2001:0db8::eade:27ff:fe04:aa01-2001:0db8::eade:27ff:fe04:ab01

You may also refer the below document link for more information:
https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/9463/threat-feeds

Regards,

Shilpa C.P