Command

Forum|Forum|3 years ago
April 18, 2023
2 replies
1890 views

How to find which policy is used for a specific traffic( from a particular source to particular destination.) using cli

FortiGate

Best answer by knagaraju

Hello anandhubs,

Below is the command to check policy lookup from cli

diagnose firewall iprope lookup <src ip> <src port> <dst ip> <dst port> <protocol> <device>

For example
diagnose firewall iprope lookup 192.168.1.1 123 8.8.8.8 443 6 port4

Please let me know if you any additional queries.

gfleming

Staff

I don't believe there is a way to do this using CLI. You can use grep to filter your config output but that's about it AFAIK

knagarajuAnswer

Staff

Hello anandhubs,

Below is the command to check policy lookup from cli

diagnose firewall iprope lookup <src ip> <src port> <dst ip> <dst port> <protocol> <device>

For example
diagnose firewall iprope lookup 192.168.1.1 123 8.8.8.8 443 6 port4

Please let me know if you any additional queries.

Sign up

Login with SSO

Login to the community

Login with SSO