Technical Tip: ZTNA rules options after 7.2.5 upgrade

In the previous versions, the option to configure ZTNA rules was available under Policy & Objects -> ZTNA -> ZTNA Rules.

The ZTNA option has to be initially enabled under System -> Feature Visibility.


After upgrading to v7.2.5, the ZTNA rules option is not available under Policy & Objects -> ZTNA.


To access this feature on 7.2.5, navigate to System -> Feature Visibility and enable Explicit Proxy.


After enabling Explicit proxy, it will be possible to create a new ZTNA-type policy under Policy & Objects -> Proxy Policy.

It is also possible to create a ZTNA-type policy under Policy & Objects -> Firewall Policy.

The difference is that this method cannot control access based on the destination interface or the real server’s destination address as a Proxy Policy.

Related document:

Basic ZTNA configuration | FortiGate / FortiOS 7.2.5 | Fortinet Document Library .