FortiManager
FortiManager supports network operations use cases for centralized management, best practices compliance, and workflow automation to provide better protection against breaches.
awasfi_FTNT
Staff
Staff
Article Id 397783
Description

This article describes the issue when a custom internet service or internet service group is created on FortiManager, the policy package status will change to 'modified'. And it will affect all VDOMs if multiple VDOMs are in use on FortiGate. 

 

policy_package_status.jpg
Scope FortiManager.
Solution

This is expected behavior. Custom internet services must be installed across all VDOMs, whether they are used in any policy package or not.

 

custom_1.jpg

 

custom_2.jpg

 

Any modifications to a custom internet service, including changes to address objects or address groups referenced within it, will mark the policy package status as well. This requires reinstallation of the affected policy packages to make them in sync again.

custom_3.jpg

 

Note: Custom Internet Services will be imported from FortiGate even if they are not referenced in any policy.