Configuring policy lists

Firewall configuration

 

 

Changing the order of policies in a policy list

To change the order of a policy in a policy list

1Go to Firewall > Policy.

2Select the policy list that you want to change the order of.

3Choose the policy that you want to move and select Move To to change its order in the policy list.

4Type a number in the Move to field to specify where in the policy list to move the policy and select OK.

Enabling and disabling policies

You can enable and disable policies in the policy list to control whether the policy is active or not. The FortiGate unit matches enabled policies but does not match disabled policies.

Disabling policies

Disable a policy to temporarily prevent the firewall from selecting the policy. Disabling a policy does not stop active communications sessions that have been allowed by the policy. For information about stopping active communication sessions, see “System status” on page 111.

To disable a policy

1Go to Firewall > Policy.

2Select the policy list that contains the policy that you want to disable.

3Clear the check box of the policy to disable it.

Enabling policies

Enable a policy that has been disabled so that the firewall can match connections with the policy.

To enable a policy

1Go to Firewall > Policy.

2Select the policy list that contains the policy that you want to enable.

3Select the check box of the policy to enable it.

196

Fortinet Inc.

Page 196
Image 196
Fortinet FortiGate-800 Changing the order of policies in a policy list, Enabling and disabling policies, Enabling policies