Skip to main content
kadey
kadey
New Member
April 7, 2020
Question

Block gateway-sourced traffic...

  • April 7, 2020
  • 2 replies
  • 2613 views

I've created policies to restrict traffic to the internet sourced from a FortiGate 6.2 device itself, but they're not working. They're at the top of the policy list, and Deny in enabled.

 

Is this possible?

 

    2 replies

    Dave_Hall
    Dave_Hall
    New Member
    April 8, 2020

    Hi Ken.

     

    If you are trying to block incoming traffic from the Internet to your fgt, you will need to use a local-in-policy. 

     

    Please note that ports used by the fgt are needed for certain services. This link explains what those ports are.  Is there a reason for wanting to block certain outgoing ports from the fgt itself?

    kadey
    kadeyAuthor
    New Member
    April 9, 2020

    I'm just testing using Fabric Connector in policies, and just picked outbound traffic to test.

    I can test with inbound as well, if I can use Fabric Connector objects in a local-in-policy.

     

    Terms & ConditionsAccessibility statement
    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT