Skip to main content
xpenno255
New Member
September 9, 2020
Question

Apply and Application Control Policy to all inbound traffic

  • September 9, 2020
  • 1 reply
  • 2448 views

Hi all,

 

is it possible to apply application control policy to all inbound traffic without an IPV4 policy set to any any accept which is obviously not desirable.

 

Cheers

Spence

    1 reply

    bommi
    New Member
    September 9, 2020

    Hi,

     

    you can do this using an "Interface Policy".

     

    If you are only using a fortigate you need to go to the cli and do it like in this example:

    config firewall interface-policy     edit 1         set interface "wan1"         set application-list-status enable         set application-list "default"         set av-profile-status enable         set av-profile "default"     next end

     

    If you have an fortimanager you can also do this using the manager gui, you just need to enable the interface policy in the display options.

     

    You should know that every traffic to this interface will go to the ips engine, as an result you can get an negative performance impact.

     

    Regards

    bommi