Troubleshooting Tip : error system external-resource; "The resource is invalid" error in install log for external threat feed config.

[jjdope]

Description

This article describes a workaround to resolve the issue where it shows the error 'error system external-resource; 'The resource is invalid' ' when trying to push a policy which has external threat feed added as source or destination.

Scope

FortiManager, FortiGate.

Solution

Create an IP Address Threat Feed on Fabric View -> External Connectors -> Create New -> IP Address Threat Feed.

The URL of the external resource which consists of the IP lists is added. 

This threat feed has been added as a destination in the firewall policy.

When pushing the configuration to the FortiGate, it threw the following error where the marked area is the URL.

Resolution:

1. The DNS resolution is not there as this was an internal website.
2. Use the internal IP address in the IP thread feed URL.