Fortigate firewall policy for Fortimail AV push

[Bobby_Maclaren]

Hello, 

I want to allow push updates for my Fortimail. Problem is i cannot add FortiGuard servers as a Source for incomming direction. Has anyone encountered this? Am i getting it wrong?

Thank you. 

[srajeswaran]

Can you try using the ISDB object fortinet.fortiguard. Are you saying you are not able to use this object in source address field?

[Bobby_Maclaren]

You can use it as destination only.  

[abelio]

Hello,
historically 9443/udp for appliances;  I don't know if it changed in 7.4 new version

Here the official doc:
https://docs.fortinet.com/document/fortigate/6.4.0/ports-and-protocols/74478/fortimail-open-ports

[Bobby_Maclaren]

Yes, but i couldnt find, what is the Source.

[Bobby_Maclaren · Accepted solution]

Fortinet support recommended adding ip addresses communicating on port 9443 manually.