Which Internet Service Database on Fortigate should I use to reach Microsoft Activation Servers.
I have these lists:
Microsoft-Web should work fine for your use-case.
Hi @jic ,
You may use below command to verify which ISDB is matching for particular subnet, accordingly you can use ISDB object.
dia internet-service match <vdname> <ip> <netmask
xenon-kvm06 # xenon-kvm06 # dia internet-service match root 104.85.34.53 255.255.255.255
Internet Service: 327681(Microsoft-Web), matched num: 4
Internet Service: 327682(Microsoft-ICMP), matched num: 1
Internet Service: 327683(Microsoft-DNS), matched num: 2
Internet Service: 327684(Microsoft-Outbound_Email), matched num: 4
Internet Service: 327686(Microsoft-SSH), matched num: 1
Internet Service: 327687(Microsoft-FTP), matched num: 2
Internet Service: 327688(Microsoft-NTP), matched num: 2
Internet Service: 327689(Microsoft-Inbound_Email), matched num: 4
Internet Service: 327694(Microsoft-LDAP), matched num: 4
Internet Service: 327695(Microsoft-NetBIOS.Session.Service), matched num: 2
Internet Service: 327696(Microsoft-RTMP), matched num: 2
Internet Service: 327704(Microsoft-NetBIOS.Name.Service), matched num: 1
Internet Service: 327680(Microsoft-Other), matched num: 2
Reference Document :
https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-search-ISDB-using-IP-address/ta-p/1...
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2023 Fortinet, Inc. All Rights Reserved.