Fortinet Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
kiclee
New Contributor II

Can I write comments in txt file for Threat Feed?

Hello,

 

I made a txt file for Threat Feed as below

kiclee_0-1662100978637.png

I wrote '#" for comment

Paloalto can ignore some characters like '#' and recognize comment.

Howerver Fortinet can't ignore "#" and then recognize invalid.

Can you let me know how to use comment?

 

1 Solution
amouawad
Staff
Staff

If this is a threat feed that you're making you could redesign it a little by placing the comments above the IP address. For example:

 

#blocked IP 1

1.1.1.1

#blocked IP 2

2.2.2.2

 

The FortiGate will parse the two IP addresses and ignore the lines with #.

View solution in original post

5 REPLIES 5
akumarr
Staff
Staff

Dear Kiclee.

I understand that you are using an external threat feed,
So may I know whether "View entries" is not showing the "#" ?

Best regards,
ARUNKUMAR.R.
kiclee
New Contributor II

Dear akumarr,

No, "view entires" is showing "#" as below

kiclee_0-1662103812945.png

 

Shilpa1

Hello kiclee,

 


Please be advised that for IP addresses, only the below formats listed under Example, are considered valid.

 

IP Address

The file contains one IP/IP range/subnet per line. It is available as an External IP Block List in DNS Filter profiles, and as a Source/Destination in IPv4, IPv6, and proxy policies.

Example:

192.168.2.100
172.200.1.4/16
172.16.1.2/24
172.16.8.1-172.16.8.100
2001:0db8::eade:27ff:fe04:9a01/120
2001:0db8::eade:27ff:fe04:aa01-2001:0db8::eade:27ff:fe04:ab01

You may also refer the below document link for more information:
https://docs.fortinet.com/document/fortigate/6.2.0/cookbook/9463/threat-feeds

Regards,

Shilpa C.P

amouawad
Staff
Staff

If this is a threat feed that you're making you could redesign it a little by placing the comments above the IP address. For example:

 

#blocked IP 1

1.1.1.1

#blocked IP 2

2.2.2.2

 

The FortiGate will parse the two IP addresses and ignore the lines with #.

kiclee
New Contributor II

Thank you very much, amouawad :)

It is so useful for me