FortiGate Administration Guide - FirewallShop.com

Viewing the firewall policy list
Firewall Policy
Count
Delete icon
Edit icon
Insert Policy Before icon
Move To icon
The FortiGate unit counts the number of packets and bytes a
firewall policy is hit.
For example, 5/50B means that a total of five packets and 50
bytes has hit the policy.
The counter is reset when the FortiGate unit is restarted or
the policy is deleted and re-configured.
Select to delete the policy from the list.
Select to open the policy for editing.
Select to add a new policy above the corresponding policy
(the New Policy screen appears).
Select to move the corresponding policy before or after
another policy in the list. See “Moving a policy to a different
position in the policy list” on page 270.
Adding a firewall policy
Use the following steps to add a firewall policy to a firewall policy list.
1 Go to Firewall > Policy.
2 Select Create New or select the Insert Policy before icon beside a policy in the list
to add the new policy above that policy.
3 Select the source and destination interfaces.
4 Select the source and destination addresses.
5 Configure the policy.
For information about configuring policies, see “Configuring firewall policies” on
page 271.
6 Select OK.
7 Arrange policies in the policy list so they have the expected results.
For information about arranging policies in a policy list, see “How policy matching
works” on page 268 and “Moving a policy to a different position in the policy list”.
Moving a policy to a different position in the policy list
You can move a policy in the list to influence how policies are evaluated. When
more than one policy has been defined for the same interface pair, the policy that
is first in the list is evaluated first.
The ordering of firewall encryption policies is important to ensure that they take
effect as expected—firewall encryption policies must be evaluated before regular
firewall policies.
Moving a policy in the list does not change its policy ID number.
Figure 165:Move Policy
1 Go to Firewall > Policy.
2 Select the Move To icon in the row beside the policy that you want to move.
3 Specify the position for the policy.
4 Select OK.
FortiGate Version 3.0 MR5 Administration Guide
270 01-30005-0203-20070830