Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
lmbrd
New Contributor III

Fortigate external ip threats comments

Hello, I'm trying to set up threat feed (external connections) via Fortimanager (v7.0.13) for my 2 Fortigates (v6.4.12 and v7.0.15). They are in two corresponding ADOMs on Fortimanager (6.4 and 7.0). Syntax in the file according to the documentation (the same for both versions)

 

1.1.1.1 # This is a test

 

However, for version 7.0, comments are recognized correctly, but for version 6.4, they are not. (screenshots). Tell me, please, what the problem might be?Screenshot 2025-03-03 114037.pngScreenshot 2025-03-03 114020.png

5 REPLIES 5
AEK
SuperUser
SuperUser

Hi

I have similar behavior on my 6.4.x, but it seem intermittent.

 

feed.png

AEK
AEK
lmbrd
New Contributor III

Yes but I think my problem is different. It seems that at some stage the "#" symbol is being converted incorrectlyScreenshot 2025-03-06 062536.png

AEK

Can you confirm that the feed source is a text file and not html file?

AEK
AEK
lmbrd
New Contributor III

ofc it is *.txt file
Screenshot 2025-03-10 063117.png

lmbrd
New Contributor III

This is weird, but I think I've solved the workaround.
It seems that in version 6.4 the comments should come before the IP address. So the comments are actually there in the file, but not visible on devices. At least this wayScreenshot 2025-03-10 071008.pngScreenshot 2025-03-10 070534.png

Announcements
Check out our Community Chatter Blog! Click here to get involved
Labels
Top Kudoed Authors