Technical Tip: Deny traffic for policy name 'Block-Internal-Subnets' in Internet access traffics logs

Description

The article describes the Block-Internal-Subnet Internet traffic logs in FortiSASE, and limitations regarding them.

Scope

FortiSASE v26.1.1.

Solution

The snapshot below shows an example of Internet traffic logs where Block-Internal-Subnet policy name was matched.

Block-Internal-Subnets policy is an internal FortiSASE policy that restricts internet traffics to subnets 10.8.0.0/16 and 10.16.0.0/16 from FortiSASE endpoints.

The policy is hidden in the FortiSASE portal as it is an internally managed policy, and administrators do not have control over this policy.

However, this policy restriction does not apply to the Secure Private Access (SPA) connection. Customers can still access internal resources within the same subnets (10.8.0.0/16 and 10.16.0.0/16) through SPA traffic.