Troubleshooting Tip: TCP/0:0 in custom service

FortiGate

FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.

Article Id 321720

Description

This article describes the TCP/0:0 configuration in custom service.

Scope

FortiGate.

Solution

In the Firewall Policy, custom service can be configured by selecting the '+' sign under Service and selecting 'Create'.

The parameters listed below can be adjusted. The Destination Port is set to TCP/0:0/ It is also possible to enable the Specify Source Ports TCP/0:0 service.

Once a custom service has been created, it is possible to apply it to the Firewall Policy. This TCP/0:0 is the inverse of ANY ANY. Traffic will use the source and destination ports set to 0, thereby blocking ALL services (any > 0).

287

Contributors

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.