FortiGate Administration Guide - FirewallShop.com

Firewall Policy
Viewing the firewall policy list
Figure 164:Sample policy list
Filter
Delete Edit
Insert Policy Before
Move To
The policy list displays the following information. Note that some of the columns
are not displayed by default. Use Column Settings to add or remove table
columns.
Create New
Column Settings
Filter icon
ID
Source
Destination
Schedule
Service
Profile
Action
Status
From
To
VPN Tunnel
Authentication
Comments
Label
Log
Select to add a firewall policy. See “Adding a firewall policy”
on page 270. Select the down arrow beside Create New to
choose to either add a firewall policy or firewall policy section.
A firewall policy section is a way of grouping firewall policies.
Select to customize the table view. You can select the
columns to show and specify the column displaying order in
the table.
By default, the Status, From, To, VPN Tunnel, Authentication,
Comments, Label, Count, Log and Index columns are not
displayed.
Select to edit the column filters, which allow you to filter or
sort the policy list according to the criteria you specify. For
details, see “Adding filters to web-based manager lists” on
page 43.
The policy identifier. Policies are numbered in the order they
are added to the policy list.
The source address or address group to which the policy
applies. See “Firewall Address” on page 289. Address
information can also be edited from the policy list. Clicking on
the address opens the Edit Address dialog box.
The destination address or address group to which the policy
applies. See “Firewall Address” on page 289. Address
information can also be edited from the policy list. Clicking on
the address opens the Edit Address dialog box.
The schedule that controls when the policy should be active.
See “Firewall Schedule” on page 301.
The service to which the policy applies. See “Firewall
Service” on page 293.
The protection profile that is associated with the policy.
The response to make when the policy matches a connection
attempt.
Either enabled or disabled.
The source interface.
The destination interface.
The VPN tunnel the VPN policy uses.
The user authentication method the policy uses.
Comments entered when creating or editing the policy.
The firewall section title.
A green check mark indicates traffic logging is enable for the
policy; a grey cross mark indicates traffic logging is disabled
for the policy.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 269