Technical Tip: Internet service name value parse error in config error log

[mattchow_FTNT]

Description	This article describes the expected internet service error shown in the config error log.
Scope	FortiGate.
Solution	To check the configuration change log, the command 'diagnose debug config-error-log read' is used. It is expected to see an internet service log especially the upgraded firmware version from v7.0 to v7.2 as shown below diagnose debug config-error-log read >>> "edit" "Google-SMTP(S)" @ global.firewall.internet-service-name:value parse error (error -173) >>> "edit" "Google-FTP(S)" @ global.firewall.internet-service-name:value parse error (error -173) >>> "edit" "Google-IMAP(S)" @ global.firewall.internet-service-name:value parse error (error -173) >>> "edit" "Google-POP3(S)" @ global.firewall.internet-service-name:value parse error (error -173) >>> "edit" "Google-LDAP(S)" @ global.firewall.internet-service-name:value parse error (error -173) >>> "edit" "Facebook-SMTP(S)" @ global.firewall.internet-service-name:value parse error (error -173) >>> "edit" "Facebook-FTP(S)" @ global.firewall.internet-service-name:value parse error (error -173) >>> "edit" "Apple-SMTP(S)" @ global.firewall.internet-service-name:value parse error (error -173) >>> "edit" "Apple-FTP(S)" @ global.firewall.internet-service-name:value parse error (error -173) >>> "edit" "Apple-IMAP(S)" @ global.firewall.internet-service-name:value parse error (error -173) >>> "edit" "Yahoo-SMTP(S)" @ global.firewall.internet-service-name:value parse error (error -173) >>> "edit" "Yahoo-FTP(S)" @ global.firewall.internet-service-name:value parse error (error -173) It is not a bug or config lost in the internet service database but a prohibited character () in the newer firmware version. The (S) behind all of the group names will be updated automatically, with no impact or interruption on policy using the internet service database, and it is just an information log only.