How to open some ports using policy-objects / services ?

Hi @stl_crs ,

You can define custom services (your required protocols/ports) and use those services in the policy.

More info about the custom services: https://docs.fortinet.com/document/fortigate/6.0.0/cli-reference/398367/firewall-service-custom

if your services are hosted in perhaps a server you can create a VIP on the server IP for that particular service (map ports under the VIP config if necessary). Then create a policy outside to inside with destination the VIP and under services specify the ports of interest, in your case 5xx and 10xxx.