FortiGate Administration Guide - FirewallShop.com

Firewall Policy
Firewall policy examples
With their current network topography, all 15 of the internal computers are behind
a router and must go to an external source to access the IPS Mail and Web
servers. All home based employees access the router through open/non secured
connections.
Figure 172:Example SOHO network before FortiGate installation
Company A requires secure connections for home-based workers. Like many
companies, they rely heavily on email and Internet access to conduct business.
They want a comprehensive security solution to detect and prevent network
attacks, block viruses, and decrease spam. They want to apply different protection
settings for different departments. They also want to integrate web and email
servers into the security solution.
To deal with their first requirement company A configures specific policies for each
home-based worker to ensure secure communication between the home-based
worker and the internal network.
1 Go to Firewall > Policy.
2 Select Create New and enter or select the following settings for Home_User_1:
Interface / Zone Source: internal Destination: wan1
Address
Source:
Destination: Home_User_1
CompanyA_Network
Schedule
Always
Service
ANY
Action
IPSEC
VPN Tunnel
Home1
Allow Inbound
yes
FortiGate Version 3.0 MR5 Administration Guide
01-30005-0203-20070830 283