FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
lvannstruth
Staff
Staff
Article Id 317555
Description

This article describes how to resolve issues with external threat feed objects not showing any valid entries when the FortiGate is successfully loading the feed.

Scope FortiGate.
Solution

For external threat feeds (IP address/domain/MAC address/Malware hash) where the feed is loading a text file hosted on an external web server, the feed may display no valid entries when the file loads successfully.

 

Example IP address threat feed experiencing the issue:

 

utf16_no_valid_entries.png

 

utf16_no_valid_entries2.png

 

The external text file is viewable and valid when viewed in a web browser:

 

web_browser.png

 

This error can be caused due to the file being saved in a text encoding other than UTF-8. The file will load successfully from the external server, but the text will not be parsed correctly and loaded into an object that can be used on the FortiGate.


The text encoding of the file can be checked in Notepad:

 

utf16 text.png

 

To correct the issue, ensure that the file loaded by the FortiGate is UTF-8 text encoded. The entries will then load correctly:

 

utf8.png