Check Internet Service Database Match
(2024-08-28)
Remember you need to have basic support in order for this db to be populated. Firewalls without a contract do not have this db.
Search for a service:
FortiGate80D # diagnose internet-service id | grep -i microsoft
ID: 327681 name: "Microsoft-Web"
ID: 327682 name: "Microsoft-ICMP"
[...]
Look up specific service:
FortiGate80D # diagnose internet-service id 327782
[...]
23.3.100.221-23.3.100.221 geo_id(16369) black list(0x0) proto(6) port(80 443)
23.6.221.146-23.6.221.146 geo_id(4234) black list(0x0) proto(6) port(80 443)
[...]
Look up a specific IP:
FortiGate80D # diagnose internet-service match root 23.11.221.187 255.255.255.255
Internet Service: 327782(Microsoft-Office365), matched num: 2
Internet Service: 327681(Microsoft-Web), matched num: 4
Internet Service: 327682(Microsoft-ICMP), matched num: 1
Internet Service: 327683(Microsoft-DNS), matched num: 2
Internet Service: 327684(Microsoft-Outbound_Email), matched num: 4
Internet Service: 327686(Microsoft-SSH), matched num: 1
[...]
Look up a specific network by adjusting the network mask:
FortiGate80D # diagnose internet-service match root 23.11.221.0 255.255.255.0
Internet Service: 327782(Microsoft-Office365), matched num: 2
Internet Service: 196723(Apple-App.Store), matched num: 2
Internet Service: 196609(Apple-Web), matched num: 8
Internet Service: 196610(Apple-ICMP), matched num: 2
Internet Service: 196611(Apple-DNS), matched num: 4
[...]