Firewall local policy

Forum|Forum|1 year ago
May 17, 2025
2 replies
1238 views

I want to restrict by allowing some hosts to be can access my fortigate using public IP and block the rest.

Searching in the community this can be done by creating local-in firewall policy but in my fortigate there is no local-in policy. How i can enable this?

FortiGate

salemneaz

Staff

https://docs.fortinet.com/document/fortigate/7.6.0/administration-guide/363127/local-in-policy

HS08Author

Visitor III

in my fortigate there is no local-in policy. Should be enabled first? if yes how we can enable that option?

Toshi_Esumi

SuperUser

If you're running 7.4.x or older, you need to use CLI. The feature is always there and available unless you're using an ancient version. 7.6 started GUI support .
https://docs.fortinet.com/document/fortigate/7.6.0/new-features/308650/gui-support-for-local-in-policies

Toshi

Yurisk

SuperUser

Local-in policies in GUI, as already mentioned, are available starting 7.6, and as only very adventurous and "feeling lucky" people run 7.6. today in production, all other versions have it in CLI only:

https://docs.fortinet.com/document/fortigate/7.0.7/administration-guide/363127/local-in-policies

Some examples, of configurations:

https://yurisk.info/2022/07/04/fortigate-local-in-policy-configuration-examples-for-vpn-ipsec-vpn-ssl-bgp-and-more/

and https://yurisk.info/2020/06/07/fortigate-local-in-policy/

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded