How to open some ports using policy-objects / services ?

[stl_crs]

Hello

I need to give permission to remote IP address to use one of our services. Our services use 5xx and 10xxx ports. How can i create permission for these ports ? 

[aionescu]

Hi @stl_crs ,

You can define custom services (your required protocols/ports) and use those services in the policy.

More info about the custom services: https://docs.fortinet.com/document/fortigate/6.0.0/cli-reference/398367/firewall-service-custom

[ezhupa]

if your services are hosted in perhaps a server you can create a VIP on the server IP for that particular service (map ports under the VIP config if necessary). Then create a policy outside to inside with destination the VIP and under services specify the ports of interest, in your case 5xx and 10xxx.