196 01-28007-0068-20041203 Fortinet Inc.
Configuring firewall policies Firewall
.
Comments
You can add a description or other information about the policy. The comment can be
up to 63 characters long, including spaces.
Configuring firewall policies
Use the following procedures to add, delete, edit, re-order, disable, and enable a
firewall policy.
To add a firewall policy
1Go to Firewall > Policy.
2Select Create New.
You can also select the Insert Policy before icon beside a policy in the list to add the
new policy above that policy.
3Select the source and destination interfaces.
4Select the source and destination addresses.
5Configure the policy.
For information about configuring the policy, see “Policy options” on page191.
6Select OK to add the policy.
7Arrange policies in the policy list so that they have the results that you expect.
For information about arranging policies in a policy list, see “How policy matching
works” on page 190.
To delete a policy
1Go to Firewall > Policy.
2Select the Delete icon beside the policy you want to delete.
3Select OK.
To edit a policy
1Go to Firewall > Policy.
2Select the Edit icon beside the policy you want to edit.
3Edit the policy as required.
4Select OK.
To change the position of a policy in the list
1Go to Firewall > Policy.
2Select the Move To icon beside the policy you want to move.
Original
(forward) DSCP
value
Set the DSCP value for packets accepted by the policy. For example, for an
Internal->External policy the value is applied to outgoing packets as they
exit the external interface and are forwarded to their destination.
Reverse (reply)
DSCP value
Set the DSCP value for reply packets. For example, for an
Internal->External policy the value is applied to incoming reply packets
before they exit the internal interface and returned to the originator.