FortiGate Administration Guide - FirewallShop.com

Firewall Policy
Configuring firewall policies
Traffic Shaping
User
Authentication
Disclaimer
Redirect URL
Comments
Traffic Shaping controls the bandwidth available to, and sets the priority
of the traffic processed by, the policy.
• Be sure to enable traffic shaping on all firewall policies. If you do not
apply any traffic shaping rule to a policy, the policy is set to high
priority by default.
• Distribute firewall policies over all three priority queues (low,
medium and high).
• Be sure that the sum of all Guaranteed Bandwidth in all firewall
policies is significantly less than the bandwidth capacity of the
interface.
For information about how to configure traffic shaping, see “Adding
traffic shaping to firewall policies” on page 278
Display the Authentication Disclaimer page (a replacement message).
The user must accept the disclaimer to connect to the destination. You
can use the disclaimer in conjunction with authentication or a protection
profile. This option is available on some models. It is not available for
SSL-VPN policies.
If you enter a URL, the user is redirected to the URL after
authenticating and/or accepting the user authentication disclaimer. This
option is available on some models. It is not available for SSL-VPN
policies.
Add a description or other information about the policy. The comment
can be up to 63 characters long, including spaces.
Configuring intra-VLAN firewall policies (FortiGate-224B only)
In switch view, the FortiGate-224B unit can create firewall policies governing
traffic between switch ports that are on the same switch VLAN. These are called
switch VLAN-secure policies. If you want to create policies between VLANs, see
“Firewall policy options” on page 272.
An intra-VLAN policy must have at least one secure port as source or destination.
It is not possible to create a firewall policy between two non-secure ports. For
information about creating secure switch ports, see “Configuring a switch-LAN
interface” on page 210.
Go to Firewall > Policy and select Create New to configure a new firewall policy.
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 275