Skip to main content
HeretoLearn23
New Member
Jul 15, 2024 6:38 PM UTC
Question

Apply a CLI configuration using a network access policy

Version: 7.4.0.0427

OS: CentOS

I have created a CLI Configuration and would like to apply it to a network access policy, but I am not seeing any option in the Network Access view to actually apply the cli config to a specific policy. 

 

I was able to apply the CLI within Model Configuration on a specific logical network from that view, but is there not a way to just apply it to a Network Access Policy? 

 

I have reviewed the below documentation but not actually reading where/how to apply it to a policy. 

https://docs.fortinet.com/document/fortinac-f/7.4.0/administration-guide/926300/network-access

 

https://docs.fortinet.com/document/fortinac-f/7.4.0/administration-guide/856626/apply-a-cli-configuration-using-a-network-access-policy

 

Any help on this will be greatly appreciated. 

Thanks

3 replies

ebilcari
Staff
Staff
Jul 16, 2024 7:35 AM UTC

Applying CLI configuration directly from the NAP Configurations is considered a legacy method and it's disabled by default. Applying the CLI from Model configurations is the suggested method.

Is there a specific scenario that you still need to use this legacy method?

Emirjon
ebilcari
Staff
Staff
Jul 16, 2024 10:04 AM UTC

If needed it can still be enabled from CLI as shown in this article:

globaloptiontool -name policy.access.allowDirectConfig -set true

Emirjon
HeretoLearn23
New Member
Jul 16, 2024 12:00 PM UTC

I have applied it via model configuration. Thank you for the input.  

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT