Skip to main content
rockychan
New Member
November 12, 2018
Solved

Application Policy Fall-Through

  • November 12, 2018
  • 1 reply
  • 3360 views

Hi, Fortinet!

Recently one of my customers is asking me about this question below:

Can Fortigate trigger policy fall-through when one session doesn't match a policy on the top? He means, when the srcint/dstint/srcip/dstip/service/schedule are matched, but application profile not matched, will we be able to fall through down policies till the end, or till one that matches.

I think he is referring to Palo Alto policy configs when asking this. I have searched a lot but can not get an obvious answer, so I'd like to post it here to leave a mark. Thanks a lot!

Best answer by neonbit

You can do this with the newest version of FortiGate (5.6 and 6.0) where the policies are like Palo Altos. You create NGFW policies. More info here: [link]https://cookbook.fortinet.com/ngfw-policy-56/[/link]

1 reply

neonbit
neonbitAnswer
New Member
November 12, 2018

You can do this with the newest version of FortiGate (5.6 and 6.0) where the policies are like Palo Altos. You create NGFW policies. More info here: [link]https://cookbook.fortinet.com/ngfw-policy-56/[/link]

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT