FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
asanzd
Staff
Staff
Article Id 362107

 

Description

This article describes how to proceed when messages about 'Microsoft-Teams' objects appear as obsolete on debugging the configuration uploaded to a FortiGate.

Scope

FortiGate.

Solution

There has been a change on two objects from ISDB which are:
Microsoft-Teams.Published.Worldwide.Allow and Microsoft-Teams.Published.Worldwide.Optimize. It is now obsolete.
When doing 'diagnose debug config-error-log read' on some FortiGate configurations, this message could appear:

 

FG # diag debug config-error-log read
 <----- internet-service-name Microsoft-Teams.Published.Worldwide.Allow(id=327992) is now obsolete. change the configuration(s) containing this service name.

<-----  internet-service-name Microsoft-Teams.Published.Worldwide.Optimize(id=327991) is now obsolete. Change the configuration(s) containing this service name.

 

This message means that these two objects must be deleted from the configuration, if not, an error will persist even if they are not being used.

 

config firewall internet-service-name

    delete [object_name]
end

 

These objects can be replaced by 'Microsoft-Skype_Teams' (id=327781) if they are being used.

When comparing the objects in the 'obsolete' ones with the ones in the 'Microsoft-Skype' one, it can be seen that 'Microsoft-Skype' contains the others.
For more information about ISDB Microsoft groups, follow this article: Technical Tip: Different Internet Service Database groups for Microsoft Office 365.