To Next Page

To Previous Page

Firewall Policy

FortiGate-1000 Administration Guide 01-28006-0009-20041105 199

3 Select the position for the policy.

4 Select OK.

To disable a policy

Disable a policy to temporarily prevent the firewall from selecting the policy. Disabling

a policy does not stop active communications sessions that have been allowed by the

policy.

1 Go to Firewall > Policy.

2 Clear the Enable check box beside the policy you want to disable.

To enable a policy

1 Go to Firewall > Policy.

2 Select Enable.

Policy CLI configuration

The natip keyword for the firewall policy command is used in encrypted

(VPN) policies. A natip address cannot be added using the web-based manager. You

can configure complete firewall policies using from the CLI. See the FortiGate CLI

Reference Guide for descriptions of all firewall policy keywords.

Command syntax pattern

config firewall policy

edit <id_integer>

set <keyword> <variable>

end

Note: This command has more keywords than are listed in this Guide. See the FortiGate CLI

Reference Guide for a complete list of commands and keywords.

Fortinet FortiGate FortiGate-1000 Administration Guide

Other manuals for Fortinet FortiGate FortiGate-1000