Best practices to review configuration and rules for fortigate firewall and fortiweb

Hi @okllee ,

If you have a FortiManager, I would recommend using the consistency check tool that can help clean up your firewall policies - 

https://docs.fortinet.com/document/fortimanager/7.6.2/administration-guide/233367/perform-a-policy-consistency-check

Otherwise, a policy review is an extensive process that depends on your requirements and dependencies. There is no one tool that can validate if your policies are at their best unless you have a 3rd party or the vendors consultant looking at it. 

Hi Okllee

Hope this discussion can help.

https://community.fortinet.com/t5/Support-Forum/Firewall-Policies/m-p/286505