FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
nnair
Staff
Staff
Article Id 403770

 

Description This article describes how to configure Internet Service database objects for Adobe.
Scope FortiGate.
Solution

To apply an Adobe ISDB object to a policy from the GUI and CLI:

  1. Navigate to the policy and objects: Create a new policy for the ISDB. Give incoming and outgoing interfaces based on topology, select 'Destination', select 'Address', and change to Internet service.

 

image.png

 

Add all the Adobe objects under the ISDB, set action as Accept, enable NAT, and enable policy.

 

  1. To enable the Internet service objects on the Policy:

 

config firewall policy
   edit 44
      set uuid 3e487734-6b75-51f0-7a67-89cba431559a
      set srcintf "any"
      set dstintf "any"
      set action accept
      set srcaddr "all"
      set internet-service enable
      set internet-service-name "Adobe-Adobe.Experience.Cloud" "Adobe-Adobe.Sign" "Adobe-DNS" "Adobe-FTP" "A
      dobe-ICMP" "Adobe-Inbound_Email" "Adobe-LDAP" "Adobe-NetBIOS.Name.Service" "Adobe-NetBIOS.Session.Service"        "Ad
      obe-NTP" "Adobe-Other" "Adobe-Outbound_Email" "Adobe-RTMP" "Adobe-SSH" "Adobe-Web"
      set schedule "always"
      set logtraffic all
      set nat enable
      next
end

Contributors