Question
DSCP matching in firewall policies - migrating from Cisco to FG
Hello ,
I am migrating some firewalls rules from a Cisco router to a FortiGate, any hints on how to convert the rules below matching on the precedence and dscp ?
I found tos-mask under config firewall policy in fortigate, but what this value should be for ef and cs4 ?
thanks in advance , below are the commands on cisco router that I am wanting to migrate to FG
permit udp X.X.X.X 0.255.255.255 any precedence flash
permit udp 1X.X.X.X 0.255.255.255 any precedence flash-override
permit udp any any dscp ef
permit udp any any dscp cs4
