Skip to main content
SAFI
SAFI
New Member
June 13, 2017
Question

Isolate UDP ports 137 / 138 and TCP ports 139 / 445.

  • June 13, 2017
  • 1 reply
  • 7806 views

In my company we have an Fortigate 1200d v 5.2.4 can someone please help me so that i can isolate this ports due to  Thank you very much.

1 reply

EMES
EMES
New Member
June 13, 2017

If you mean blocking the ports, then create a security policy from inside to outside with the services below and SMB. Enter those commands into the CLI and then create the security policy and set the action to DENY.

 

config firewall service custom

edit NETBIOSNS

set udp-portrange 137

next

edit NETBIOSDS

set udp-portrange 138

next

edit NETBIOSNS

set tcp-portrange 139

next

end

 

hope that helps

 

ede_pfau
SuperUser
ede_pfau
SuperUser
June 14, 2017

NETBIOSNS is a standard service, called "SAMBA", no need to configure as custom.

Include tcp/445, "SMB", in that servicegroup to deny Windows file sharing.

Terms & ConditionsAccessibility statement