Isolate UDP ports 137 / 138 and TCP ports 139 / 445.

[SAFI]

In my company we have an Fortigate 1200d v 5.2.4 can someone please help me so that i can isolate this ports due to  Thank you very much.

[EMES]

If you mean blocking the ports, then create a security policy from inside to outside with the services below and SMB. Enter those commands into the CLI and then create the security policy and set the action to DENY.

config firewall service custom

edit NETBIOSNS

set udp-portrange 137

next

edit NETBIOSDS

set udp-portrange 138

next

edit NETBIOSNS

set tcp-portrange 139

next

end

hope that helps

[ede_pfau]

NETBIOSNS is a standard service, called "SAMBA", no need to configure as custom.

Include tcp/445, "SMB", in that servicegroup to deny Windows file sharing.